Phying News
Curated security research, vulnerabilities, advisories and tools for practitioners.

Mautic Version <=3.2.2 Advisory

Summary

Stored XSS in Mautic 3.2.2 and earlier (CVE-2020-35128, CVE-2020-35129): users with company or social-monitoring rights can inject JavaScript that runs for admins; fixed in 3.2.4.
Published
Collected

original ↗

Related coverage

back