VYPR
High severityNVD Advisory· Published Sep 17, 2024· Updated Sep 17, 2024

XSS Cross-site Scripting Stored (XSS) - Description field

CVE-2021-27915

Description

Prior to the patched version, there is an XSS vulnerability in the description fields within the Mautic application which could be exploited by a logged in user of Mautic with the appropriate permissions.

This could lead to the user having elevated access to the system.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
mautic/corePackagist
>= 1.0.0-beta2, < 4.4.124.4.12

Affected products

2

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.