Packagist/mautic/core CVE-2017-1000488: medium 6.1, EPSS 0.84%

Inline JS XSS vulnerability in Mautic

Action: Upgrade mautic/core to 2.12.0 or later.

composer require mautic/core:2.12.0

Affected

Fixed versions

Sources

• osv: GHSA-qjhr-c23f-w76q
• https://github.com/mautic/mautic/security/advisories/GHSA-qjhr-c23f-w76q
• https://nvd.nist.gov/vuln/detail/CVE-2017-1000488
• https://github.com/mautic/mautic/commit/bda60c0eefbd19c759589e975e63ab1d201c1b8e
• https://github.com/mautic/mautic/releases/tag/2.12.0

CVE-2017-1000488 · published 2021-01-19T21:16:24Z · modified 2023-11-08T03:58:47.335813Z · JSON