Skip to content

XSS vulnerability in Author URL of themes

Low
RCheesley published GHSA-xcf7-cj8q-pcjm Jan 19, 2021

Package

composer mautic/core (Composer)

Affected versions

2.13.1

Patched versions

2.14.0

Description

Impact

An XSS vulnerability was discovered in Mautic 2.13.1 in the Author URL of themes.

Patches

Update to 2.14 or later

Workarounds

None

References

https://github.com/mautic/mautic/releases/tag/2.14.0

For more information

If you have any questions or comments about this advisory:

Severity

Low

CVE ID

CVE-2018-11198

Weaknesses

No CWEs

Credits