Prior to this patch being applied, Mautic's tracking was vulnerable to Cross-Site Scripting through the Page URL variable.
2024-09-18T21:15:13.743
2024-09-27T15:29:21.450
Analyzed
CVSSv3.1: 5.4 (MEDIUM)
Type | Vendor | Product | Version/Range | Vulnerable? |
---|---|---|---|---|
Application | acquia | mautic | < 4.4.13 | Yes |
Application | acquia | mautic | < 5.1.1 | Yes |