CVE-2021-27912

Mautic versions before 3.3.4/4.0.0 are vulnerable to an inline JS XSS attack when viewing Mautic assets by utilizing inline JS in the title and adding a broken image URL as a remote asset. This can only be leveraged by an authenticated user with permission to create or edit assets.
Cross-site Scripting
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
MauticCNA
7.1 HIGH
NETWORK
HIGH
LOW
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 72%
Affected Products (NVD)
VendorProductVersion
acquiamautic
𝑥
< 3.3.4
acquiamautic
4.0.0:alpha1
acquiamautic
4.0.0:beta
acquiamautic
4.0.0:rc
𝑥
= Vulnerable software versions
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
mauticmautic
𝑥
< 3.3.4
CNA
mauticmautic
𝑥
< 4.0.0
CNA
Common Weakness Enumeration
References
https://github.com/mautic/mautic/security/advisories/GHSA-rh5w-82wh-jhr8
https://github.com/mautic/mautic/security/advisories/GHSA-rh5w-82wh-jhr8