CVE-2021-27917: Acquia Mautic

Medium severity, CVSS 5.4. EPSS: 0.3% chance of exploitation in the next 30 days.

Prior to this patch, a stored XSS vulnerability existed in the contact tracking and page hits report.

Affected products

• Acquia Mautic: after 1.0.0, before 4.4.13 (fixed in 4.4.13); from 5.0.0, before 5.1.1 (fixed in 5.1.1); version 1.0.0 only

Published 2024-09-18. Last modified 2026-06-17.