Stored XSS Vulnerability Detected in Contact Tracking and Page Hits Report

CVE-2021-27917

What is CVE-2021-27917?

There exists a stored cross-site scripting (XSS) vulnerability in Mautic's contact tracking and page hits reporting features. This vulnerability allows an attacker to inject malicious scripts into the application, which can be executed when a user views the affected reports. Such an attack can lead to unauthorized actions being taken on behalf of users and compromise the integrity of sensitive data. Protecting against this vulnerability requires updating to the latest secure version of Mautic or applying relevant security patches to mitigate risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References