Mautic vulnerabilities
40 CVEs and advisories name Mautic as an affected vendor, newest first. Follow it as a feed.
- CVE-2024-2731Improper Access Control Issues Lead to Sensitive Data Exposure in Mautic
- CVE-2024-2730Predictable Page Indexing Might Lead to Sensitive Data Exposure in Mautic
- CVE-2022-25772A cross-site scripting (XSS) vulnerability in the web tracking component of Mautic before 4.3.0 allows remote attackers to inject executable
- CVE-2021-27914A cross-site scripting (XSS) vulnerability in the installer component of Mautic before 4.3.0 allows admins to inject executable javascript
- CVE-2021-27909XSS vulnerability on password reset page
- CVE-2021-27913Use of a Broken or Risky Cryptographic Algorithm
- CVE-2021-27912XSS vulnerability on asset view
- CVE-2021-27911XSS vulnerability on contacts view
- CVE-2021-27910Stored XSS vulnerability on Bounce Management Callback
- CVE-2021-27908In all versions prior to Mautic 3.3.2, secret parameters such as database credentials could be exposed publicly by an authorized admin user