CVE-2021-27917

Description

Prior to this patch, a stored XSS vulnerability existed in the contact tracking and page hits report.

Reserved 2021-03-02 | Published 2024-09-18 | Updated 2024-09-19 | Assigner Mautic

Problem types

CWE-79 Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting')

Product status

Default status
unaffected

>= 1.0.0-beta4 before < 4.4.13
affected

>= 5.0.0 before < 5.1.1
affected

Credits

Patryk Gruszka reporter

Lenon Leite remediation reviewer

John Linhart remediation reviewer

References

github.com/...mautic/security/advisories/GHSA-xpc5-rr39-v8v2

cve.org (CVE-2021-27917)

nvd.nist.gov (CVE-2021-27917)

Download JSON