Approved changes feed: RSS · Atom

cpe:2.3:a:acquia:mautic:1.0.0:beta2:*:*:*:*:*:*

part: a version: 1.0.0 update: beta2

VendorAcquia (15d56acd-23d5-5963-9c0b-96f076249d74)
ProductMautic (543739f1-898e-5ba0-985b-428e8a4ce88d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:drupal/mautic purl2cpe 2026-06-01 10:10:56.118582
pkg:github/mautic/mautic purl2cpe 2026-06-01 10:10:56.118583

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-27915 vulnerable 2026-06-03 14:44:17.050830 XSS Cross-site Scripting Stored (XSS) - Description field
HIGH (7.6)
Prior to the patched version, there is an XSS vulnerability in the description fields within the Mautic application which could be exploited by a logged in user of Mautic with the appropriate permissions. This could lead to the user having elevated access to the system.
Published: 2024-09-17T14:02:09.969Z
Updated: 2024-09-17T16:01:29.250Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.