Patchwire CVEs, their patch status, and feeds to follow them

CVE-2024-47050

Fixed upstream EPSS <1%CVSS 5.4

Prior to this patch being applied, Mautic's tracking was vulnerable to Cross-Site Scripting through the Page URL variable.

Published 2024-09-18 · CVE record · OSV

Products: Mautic

Fixed upstream

EcosystemPackageFixed in
Packagistmautic/core4.4.13
Packagistmautic/core5.1.1
Packagistmautic/core-lib4.4.13
Packagistmautic/core-lib5.1.1