CVE-2017-1000506 - Mautic version 2.11.0 and earlier contains a Cross Site Scripting (XSS) vulnerability in Company's name that can result in denial of service and execution of javascript code

Back Back to CVE browser

MEDIUM

Mautic version 2.11.0 and earlier contains a Cross Site Scripting (XSS) vulnerability in Company's name that can result in denial of service and execution of javascript code

Published Feb 9, 2018

6.1

MEDIUM

CVSS 3.0

EPSS 1.09%

Description

Mautic version 2.11.0 and earlier contains a Cross Site Scripting (XSS) vulnerability in Company's name that can result in denial of service and execution of javascript code.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (3)

https://github.com/advisories/GHSA-358v-cqjc-2pcq
Advisory
https://github.com/mautic/mautic/issues/5222
x_refsource_CONFIRMExploitIssue TrackingThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2017-1000506

Link	Providers	Tags
https://github.com/advisories/GHSA-358v-cqjc-2pcq		Advisory
https://github.com/mautic/mautic/issues/5222		x_refsource_CONFIRMExploitIssue TrackingThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2017-1000506