Stored XSS Vulnerability Detected in Contact Tracking and Page Hits Report

CVE-2021-27917

Summary

There exists a stored cross-site scripting (XSS) vulnerability in Mautic's contact tracking and page hits reporting features. This vulnerability allows an attacker to inject malicious scripts into the application, which can be executed when a user views the affected reports. Such an attack can lead to unauthorized actions being taken on behalf of users and compromise the integrity of sensitive data. Protecting against this vulnerability requires updating to the latest secure version of Mautic or applying relevant security patches to mitigate risks.

References