{"action":"Upgrade mautic/core to 2.16.5 or later.","affected":[{"fixed":"3.2.4","introduced":"3.0.0"},{"fixed":"2.16.5","introduced":"2.0.0"}],"component":"mautic/core","cve_ids":["CVE-2021-3142"],"ecosystem":"Packagist","exploited":false,"fixed_versions":["3.2.4","2.16.5"],"ghsa_id":"GHSA-p7v4-gm6j-cw9m","id":"tcs_01M5KF665Q7TEW76NH6ACAZ0KC","modified_at":"2024-11-30T05:39:13.234035Z","published_at":"2021-01-29T20:51:20Z","references":["https://osv.dev/vulnerability/GHSA-p7v4-gm6j-cw9m","https://github.com/mautic/mautic/security/advisories/GHSA-p7v4-gm6j-cw9m","https://nvd.nist.gov/vuln/detail/CVE-2021-3142","https://github.com/mautic/mautic/commit/ba31db23e664f889da55a29ff27f797e2ab5cb1b","https://github.com/FriendsOfPHP/security-advisories/blob/master/mautic/core/CVE-2021-3142.yaml","https://github.com/mautic/mautic/releases/tag/3.2.4","https://www.mautic.org/blog/community/security-release-all-versions-mautic-prior-2-16-5-and-3-2-3","https://www.mautic.org/blog/community/security-release-all-versions-mautic-prior-2-16-5-and-3-2-4"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-p7v4-gm6j-cw9m","url":"https://osv.dev/vulnerability/GHSA-p7v4-gm6j-cw9m"}],"summary":"XSS in Mautic"}