MEDIUM4.8
GHSA-fhcx-f7jg-jx3f
Mautic vulnerable to cross-site scripting in notifications via saving Dashboards
Quick fix
GHSA-fhcx-f7jg-jx3f — mautic/core: upgrade to the fixed version with the command below.
composer require mautic/core:^4.4.12Details
### Impact Prior to the patched version, logged in users of Mautic are vulnerable to a self XSS vulnerability in the notifications within Mautic.
Users could inject malicious code into the notification when saving Dashboards.
### Patches Update to Mautic 4.4.12.
### Workarounds None
### References - https://owasp.org/www-project-top-ten/2017/A7_2017-Cross-Site_Scripting_(XSS)
If you have any questions or comments about this advisory:
Email us at [security@mautic.org](mailto:security@mautic.org)
Are you affected?
Enter the version of the package you're using.