# cve.now: Mautic

The newest entries naming Mautic as an affected vendor (up to 200), of 40 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-3105](https://cve.now/CVE-2026-3105.md): SQL Injection in Contact Activity API Sorting (CVSS 7.6)
- [CVE-2025-13828](https://cve.now/CVE-2025-13828.md): Mautic user without privileged access to the Marketplace can install and uninstall composer packages (CVSS 9.0)
- [CVE-2025-13827](https://cve.now/CVE-2025-13827.md): GrapesJsBuilder File Upload allows all file uploads (CVSS 8.8)
- [CVE-2025-9823](https://cve.now/CVE-2025-9823.md): Reflected XSS in lead:addLeadTags - Quick Add (CVSS 4.8)
- [CVE-2025-9824](https://cve.now/CVE-2025-9824.md): User Enumeration via Response Timing (CVSS 5.9)
- [CVE-2025-9822](https://cve.now/CVE-2025-9822.md): Secret data extraction via elfinder (CVSS 5.5)
- [CVE-2025-9821](https://cve.now/CVE-2025-9821.md): SSRF via webhook function (CVSS 2.7)
- [CVE-2025-7381](https://cve.now/CVE-2025-7381.md): Exposure of sensitive PHP information to an unauthorized control sphere in mautic/mautic images (CVSS 5.3)
- [CVE-2025-5256](https://cve.now/CVE-2025-5256.md): Open Redirect vulnerability on user unlock path (CVSS 5.4)
- [CVE-2024-47055](https://cve.now/CVE-2024-47055.md): Segment cloning doesn't have a proper permission check (CVSS 4.3)
- [CVE-2024-47057](https://cve.now/CVE-2024-47057.md): User name enumeration possible due to response time difference on password reset form (CVSS 5.3)
- [CVE-2024-47056](https://cve.now/CVE-2024-47056.md): Mautic does not shield .env files from web traffic (CVSS 5.1)
- [CVE-2025-5257](https://cve.now/CVE-2025-5257.md): Predictable Page Indexing Might Lead to Sensitive Data Exposure (CVSS 6.5)
- [CVE-2024-47051](https://cve.now/CVE-2024-47051.md): Remote Code Execution & File Deletion in Asset Uploads (CVSS 9.1)
- [CVE-2024-47053](https://cve.now/CVE-2024-47053.md): Improper Authorization in Reporting API (CVSS 7.7)
- [CVE-2022-25773](https://cve.now/CVE-2022-25773.md): Relative Path Traversal in assets file upload (CVSS 4.3)
- [CVE-2022-25770](https://cve.now/CVE-2022-25770.md): Insufficient authentication in upgrade flow (CVSS 7.8)
- [CVE-2024-47059](https://cve.now/CVE-2024-47059.md): Users enumeration - weak password login (CVSS 4.3)
- [CVE-2021-27917](https://cve.now/CVE-2021-27917.md): XSS in contact tracking and page hits report (CVSS 7.3)
- [CVE-2024-47050](https://cve.now/CVE-2024-47050.md): XSS in contact/company tracking (no authentication) (CVSS 5.4)
- [CVE-2024-47058](https://cve.now/CVE-2024-47058.md): Cross-site Scripting (XSS) - stored (edit form HTML field) (CVSS 2.9)
- [CVE-2022-25768](https://cve.now/CVE-2022-25768.md): Improper Access Control in UI upgrade process (CVSS 7.0)
- [CVE-2022-25777](https://cve.now/CVE-2022-25777.md): Server-Side Request Forgery in Asset section (CVSS 6.5)
- [CVE-2022-25776](https://cve.now/CVE-2022-25776.md): Sensitive Data Exposure due to inadequate user permission settings (CVSS 8.3)
- [CVE-2022-25775](https://cve.now/CVE-2022-25775.md): SQL Injection in dynamic Reports (CVSS 6.6)
- [CVE-2022-25774](https://cve.now/CVE-2022-25774.md): XSS in Notifications via saving Dashboards (CVSS 4.8)
- [CVE-2022-25769](https://cve.now/CVE-2022-25769.md): Improper regex in htaccess file (CVSS 7.2)
- [CVE-2021-27916](https://cve.now/CVE-2021-27916.md): Relative Path Traversal / Arbitrary File Deletion in Mautic (GrapesJS Builder) (CVSS 8.1)
- [CVE-2021-27915](https://cve.now/CVE-2021-27915.md): XSS Cross-site Scripting Stored (XSS) - Description field (CVSS 7.6)
- [CVE-2024-3448](https://cve.now/CVE-2024-3448.md): Improper Access Control Leads to Server-Side Request Forgery in Mautic (CVSS 5.0)
- [CVE-2024-2731](https://cve.now/CVE-2024-2731.md): Improper Access Control Issues Lead to Sensitive Data Exposure in Mautic (CVSS 5.4)
- [CVE-2024-2730](https://cve.now/CVE-2024-2730.md): Predictable Page Indexing Might Lead to Sensitive Data Exposure in Mautic (CVSS 5.3)
- [CVE-2022-25772](https://cve.now/CVE-2022-25772.md): A cross-site scripting (XSS) vulnerability in the web tracking component of Mautic before 4.3.0 allows remote attackers to inject executable (CVSS 9.6)
- [CVE-2021-27914](https://cve.now/CVE-2021-27914.md): A cross-site scripting (XSS) vulnerability in the installer component of Mautic before 4.3.0 allows admins to inject executable javascript (CVSS 7.6)
- [CVE-2021-27909](https://cve.now/CVE-2021-27909.md): XSS vulnerability on password reset page (CVSS 6.3)
- [CVE-2021-27913](https://cve.now/CVE-2021-27913.md): Use of a Broken or Risky Cryptographic Algorithm (CVSS 3.5)
- [CVE-2021-27912](https://cve.now/CVE-2021-27912.md): XSS vulnerability on asset view (CVSS 7.1)
- [CVE-2021-27911](https://cve.now/CVE-2021-27911.md): XSS vulnerability on contacts view (CVSS 8.3)
- [CVE-2021-27910](https://cve.now/CVE-2021-27910.md): Stored XSS vulnerability on Bounce Management Callback (CVSS 8.2)
- [CVE-2021-27908](https://cve.now/CVE-2021-27908.md): In all versions prior to Mautic 3.3.2, secret parameters such as database credentials could be exposed publicly by an authorized admin user (CVSS 5.8)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/mautic
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.