MEDIUM6.1

GHSA-5w74-jx7m-x6hv

XSS vulnerability in theme config file in Mautic

Quick fix

GHSA-5w74-jx7m-x6hv — mautic/core: upgrade to the fixed version with the command below.

composer require mautic/core:^2.13.0

Details

### Impact Mautic before v2.13.0 has stored XSS via a theme config file.

### Patches Update to 2.13.0 or later.

### Workarounds None.

### For more information If you have any questions or comments about this advisory: * Email us at [security@mautic.org](mailto:security@mautic.org)

Enter the version of the package you're using.

Introduced in: 0Fixed in: 2.13.0

Fixcomposer require mautic/core:^2.13.0