Mautic versions before 3.3.4/4.0.0 are vulnerable to an inline JS XSS attack when viewing Mautic assets by utilizing inline JS in the title and adding a broken image URL as a remote asset. This can only be leveraged by an authenticated user with permission to create or edit assets.
Metrics
Affected Vendors & Products
References
History
No history.
MITRE
Status: PUBLISHED
Assigner: Mautic
Published: 2021-08-30T15:55:17.220890Z
Updated: 2024-09-16T16:17:39.112Z
Reserved: 2021-03-02T00:00:00
Link: CVE-2021-27912
Vulnrichment
No data.
NVD
Status : Modified
Published: 2021-08-30T16:15:07.403
Modified: 2024-11-21T05:58:47.070
Link: CVE-2021-27912
Redhat
No data.