CVE-2021-27915 — XSS Cross-site Scripting Stored (XSS) - Description field

CVE-2021-27915

XSS Cross-site Scripting Stored (XSS) - Description field PUBLISHED

Description (CNA)

Prior to the patched version, there is an XSS vulnerability in the description fields within the Mautic application which could be exploited by a logged in user of Mautic with the appropriate permissions. This could lead to the user having elevated access to the system.

Affected (CNA)

Vendor / product	Versions
Mautic / Mautic	affected >= 1.0.0-beta2 through <= 4.4.11

CWE

CWE-80

References

https://github.com/mautic/mautic/security/advisories/GHSA-2rc5-2755-v422

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.