CVE-2024-47050

XSS in contact/company tracking (no authentication)

CVSS 5.4 MEDIUMEPSS 0.3%CWE-79

Prior to this patch being applied, Mautic's tracking was vulnerable to Cross-Site Scripting through the Page URL variable.

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Productos afectados

¿Quieres saber si tu infraestructura está expuesta a esto?

Referencias