medium6.1
CVE-2018-11200
XSS vulnerability in company name field in Mautic
Impact
### Impact Mautic version 2.11.0 and earlier contains a Cross Site Scripting (XSS) vulnerability in Company's name that can result in denial of service and execution of javascript code. ### Patches Update to 2.14.0 or later. ### Workarounds None. ### For more information If you have any questions or comments about this advisory: * Email us at [security@mautic.org](mailto:security@mautic.org)
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | mautic/core | < 2.11.0 | 2.14.0 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Acquia | Mautic | Version 2.13.1 |