Prior to this patch, a stored XSS vulnerability existed in the contact tracking and page hits report.
Please update to 4.4.13 or 5.1.1 or later.
None
https://owasp.org/www-project-top-ten/2017/A72017-Cross-SiteScripting(XSS) https://owasp.org/www-project-web-security-testing-guide/latest/4-WebApplicationSecurityTesting/07-InputValidationTesting/02-TestingforStoredCrossSite_Scripting
If you have any questions or comments about this advisory:
Email us at security@mautic.org
{ "nvd_published_at": "2024-09-18T22:15:03Z", "cwe_ids": [ "CWE-79" ], "severity": "MODERATE", "github_reviewed": true, "github_reviewed_at": "2024-09-18T22:05:59Z" }