A cross-site scripting (XSS) vulnerability in the assets component of Mautic before 3.2.4 allows remote attackers to inject executable JavaScript through the Referer header of asset downloads.
CVSS Score
9.6
EPSS Score
0.011
Published
2021-01-28
Page 3