Prior to the patched version, logged in users of Mautic are vulnerable to a self XSS vulnerability in the notifications within Mautic.
Users could inject malicious code into the notification when saving Dashboards.
This Cyber News was published on www.tenable.com. Publication date: Fri, 12 Apr 2024 22:56:04 +0000