Impact

Mautic before v2.13.0 has stored XSS via a theme config file.

Patches

Update to 2.13.0 or later.

Workarounds

None.

References

https://github.com/mautic/mautic/releases/tag/2.13.0

For more information

If you have any questions or comments about this advisory:

• Email us at security@mautic.org