CVE-2018-11198

An issue was discovered in Mautic 2.13.1. There is Stored XSS via the authorUrl field in config.json.

• CWE-79

• https://github.com/mautic/mautic/releasesRelease Notes, Third Party Advisory
• https://github.com/mautic/mautic/releases/tag/2.14.0Release Notes, Third Party Advisory
• https://github.com/mautic/mautic/releasesRelease Notes, Third Party Advisory
• https://github.com/mautic/mautic/releases/tag/2.14.0Release Notes, Third Party Advisory

Published

Sep 6, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-11191Quest DR Series Disk Backup software version before 4.0.3.1 …
• CVE-2018-11192Quest DR Series Disk Backup software version before 4.0.3.1 …
• CVE-2018-11193Quest DR Series Disk Backup software version before 4.0.3.1 …
• CVE-2018-11194Quest DR Series Disk Backup software version before 4.0.3.1 …
• CVE-2018-11195Mahara 17.04 before 17.04.8 and 17.10 before 17.10.5 and 18.…
• CVE-2018-11196Mahara 17.04 before 17.04.8 and 17.10 before 17.10.5 and 18.…
• CVE-2018-1120A flaw was found affecting the Linux kernel before version 4…2.8
• CVE-2018-11200An issue was discovered in Mautic 2.13.1. It has Stored XSS …6.1
• CVE-2018-11202A NULL pointer dereference was discovered in H5S_hyper_make_…
• CVE-2018-11203A division by zero was discovered in H5D__btree_decode_key i…
• CVE-2018-11204A NULL pointer dereference was discovered in H5O__chunk_dese…
• CVE-2018-11205A out of bounds read was discovered in H5VM_memcpyvv in H5VM…