Prior to this patch, a stored XSS vulnerability existed in the contact tracking and page hits report.
{
"versions": [
{
"introduced": "0"
},
{
"fixed": "4.4.13"
},
{
"introduced": "5.0.0"
},
{
"fixed": "5.1.1"
},
{
"introduced": "0"
},
{
"last_affected": "1.0.0-NA"
},
{
"introduced": "0"
},
{
"last_affected": "1.0.0-beta4"
},
{
"introduced": "0"
},
{
"last_affected": "1.0.0-rc1"
},
{
"introduced": "0"
},
{
"last_affected": "1.0.0-rc2"
},
{
"introduced": "0"
},
{
"last_affected": "1.0.0-rc3"
},
{
"introduced": "0"
},
{
"last_affected": "1.0.0-rc4"
}
]
}