CVE-2024-47058 — Cross-site Scripting (XSS) - stored (edit form HTML field)
With access to edit a Mautic form, the attacker can add Cross-Site Scripting stored in the html filed. This could be used to steal sensitive information from the user's current …
Published: 2024-09-18 · CVSS: 2.9 · CVSS 3.1
With access to edit a Mautic form, the attacker can add Cross-Site Scripting stored in the html filed. This could be used to steal sensitive information from the user's current session.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7