VYPR
← All advisories
High severity7.3NVD Advisory· Published Sep 18, 2024· Updated Jun 17, 2026

CVE-2021-27917

CVE-2021-27917

Description

Prior to this patch, a stored XSS vulnerability existed in the contact tracking and page hits report.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
mautic/core-libPackagist
>= 1.0.0-beta4, < 4.4.134.4.13
mautic/core-libPackagist
>= 5.0.0-alpha, < 5.1.15.1.1
mautic/corePackagist
>= 1.0.0-beta4, < 4.4.134.4.13
mautic/corePackagist
>= 5.0.0-alpha, < 5.1.15.1.1

Affected products

10
  • Mautic/Mautic8 versions
    cpe:2.3:a:acquia:mautic:*:*:*:*:*:*:*:*+ 7 more
    • cpe:2.3:a:acquia:mautic:*:*:*:*:*:*:*:*range: >1.0.0,<4.4.13
    • cpe:2.3:a:acquia:mautic:1.0.0:-:*:*:*:*:*:*
    • cpe:2.3:a:acquia:mautic:1.0.0:beta4:*:*:*:*:*:*
    • cpe:2.3:a:acquia:mautic:1.0.0:rc1:*:*:*:*:*:*
    • cpe:2.3:a:acquia:mautic:1.0.0:rc2:*:*:*:*:*:*
    • cpe:2.3:a:acquia:mautic:1.0.0:rc3:*:*:*:*:*:*
    • cpe:2.3:a:acquia:mautic:1.0.0:rc4:*:*:*:*:*:*
    • (no CPE)range: >= 1.0.0-beta4
  • ghsa-coords2 versions
    pkg:composer/mautic/corepkg:composer/mautic/core-lib
    >= 1.0.0-beta4, < 4.4.13+ 1 more
    • (no CPE)range: >= 1.0.0-beta4, < 4.4.13
    • (no CPE)range: >= 1.0.0-beta4, < 4.4.13

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.