6.1
CVSSv3

CVE-2017-1000488

Published: 03/01/2018 Updated: 25/01/2021
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
CVSS v3 Base Score: 6.1 | Impact Score: 2.7 | Exploitability Score: 2.8
VMScore: 383
Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Vulnerability Summary

Mautic version 2.1.0 - 2.11.0 is vulnerable to an inline JS XSS attack when using Mautic forms on a Mautic landing page using GET parameters to pre-populate the form.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

mautic mautic 2.11.0

acquia mautic 2.11.0

acquia mautic 2.10.1

mautic mautic 2.10.0

acquia mautic 2.5.1

acquia mautic 2.5.0

acquia mautic 2.4.0

acquia mautic 2.3.0

acquia mautic 2.9.0

acquia mautic 2.8.2

acquia mautic 2.8.1

acquia mautic 2.8.0

mautic mautic 2.9.2

mautic mautic 2.9.0

acquia mautic 2.7.1

acquia mautic 2.6.1

acquia mautic 2.2.0

acquia mautic 2.1.0

acquia mautic 2.10.0

acquia mautic 2.9.1

acquia mautic 2.7.0

acquia mautic 2.6.0

acquia mautic 2.2.1

acquia mautic 2.1.1