1. Home
  2. CVE Database
  3. CVE-2021-27915
HIGH · 7.6

CVE-2021-27915

Prior to the patched version, there is an XSS vulnerability in the description fields within the Mautic application which could be exploited by a logged in user of Mautic with the appropriate permissi...

Vulnerability Description

Prior to the patched version, there is an XSS vulnerability in the description fields within the Mautic application which could be exploited by a logged in user of Mautic with the appropriate permissions. This could lead to the user having elevated access to the system.

CVSS Score

7.6

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
REQUIRED
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
LOW

Affected Products

VendorProductVersions
AcquiaMautic>= 1.0.0, < 4.4.12

Related Weaknesses (CWE)

CWE-79CWE-80

References

FAQ

What is CVE-2021-27915?

CVE-2021-27915 is a vulnerability with a CVSS score of 7.6 (HIGH). Prior to the patched version, there is an XSS vulnerability in the description fields within the Mautic application which could be exploited by a logged in user of Mautic with the appropriate permissi...

How severe is CVE-2021-27915?

CVE-2021-27915 has been rated HIGH with a CVSS base score of 7.6/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2021-27915?

Check the references section above for vendor advisories and patch information. Affected products include: Acquia Mautic.