VULNERABILITY INTELLIGENCE

CVE-2021-27912

CVSS score7.1 HIGH

EPSS probability0.60%

CISA KEVNot currently listed

Published2021-08-30

Last modified2026-06-17

Description

Mautic versions before 3.3.4/4.0.0 are vulnerable to an inline JS XSS attack when viewing Mautic assets by utilizing inline JS in the title and adding a broken image URL as a remote asset. This can only be leveraged by an authenticated user with permission to create or edit assets.