Skip to main content
cve.nowby Sazabi
← Packagist
PackagistPackage

mautic/core-lib

6 known vulnerabilities (4 high, 1 medium, 1 low), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
6 · 4 high, 1 medium, 1 low
Registry
Packagist

Advisories 6

  • Insufficient authentication in upgrade flow

    Affected: from 1.0.0-beta3; from 5.0.0; from 1.0.0-beta3, fixed in 4.4.13; from 5.0.0-alpha, fixed in 5.1.1.

  • XSS in contact tracking and page hits report

    Affected: from 1.0.0-beta4, fixed in 4.4.13; from 5.0.0-alpha, fixed in 5.1.1.

  • CVE-2024-47050Medium 5.4

    XSS in contact/company tracking (no authentication)

    Affected: from 2.6.0, fixed in 4.4.13; from 5.0.0-alpha, fixed in 5.1.1.

  • Cross-site Scripting (XSS) - stored (edit form HTML field)

    Affected: from 5.0.0-alpha, fixed in 5.1.1; from 1.0.0-beta, fixed in 4.4.13.

  • Improper Access Control in UI upgrade process

    Affected: from 1.1.3, fixed in 4.4.13; from 5.0.0-alpha, fixed in 5.1.1.

  • XSS Cross-site Scripting Stored (XSS) - Description field

    Affected: from 1.0.0-beta2.