PT-2019-8778
CVE-2018-11200
·
تاريخ النشر
2019-09-20
·
تاريخ التحديث
2021-01-19
الوصف من
CVSS 3.1
6.1
متوسطةالمقاييسAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Mautic versions 2.11.0 and earlier
Mautic version 2.13.1
Description
An issue was discovered that allows for Stored XSS via the company name field. This Cross Site Scripting (XSS) vulnerability can result in denial of service and execution of javascript code.
Recommendations
For Mautic versions 2.11.0 and earlier, update to 2.14.0 or later.
For Mautic version 2.13.1, update to 2.14.0 or later.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾