← CVE Intelligence

CVE-2024-47050

XSS in contact/company tracking (no authentication) PUBLISHED

Description (CNA)

Prior to this patch being applied, Mautic's tracking was vulnerable to Cross-Site Scripting through the Page URL variable.

Affected (CNA)

Vendor / productVersions
Mautic / Mauticaffected >= 2.6.0 before < 4.4.13; affected > 5.0.0 before < 5.1.1

CWE

CWE-79

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.