CVE-2021-3142

Name of the Vulnerable Software and Affected Versions Mautic versions prior to 2.16.5 Mautic versions prior to 3.2.4

Description This issue relates to a cross-site scripting vulnerability that can be executed when creating or editing a company, requiring the user to be logged in as an administrator. The vulnerability was reported by Dardan Prebreza at Bishop Fox.

Recommendations Upgrade to version 2.16.5 or later for 2.x versions. Upgrade to version 3.2.4 or later for 3.x versions.