Launchpad.net

CVE 2018-11198

An issue was discovered in Mautic 2.13.1. There is Stored XSS via the authorUrl field in config.json.

See the CVE page on Mitre.org for more details.