MEDIUM5.4Packagist
GHSA-73gr-32wg-qhh7· CVE-2024-47050Mautic vulnerable to XSS in contact/company tracking (no authentication)
Modified: 9/27/2024
package
Packagist/mautic/core-lib
pkg:packagist/mautic/core-lib
HIGH7.8Packagist
GHSA-qf6m-6m4g-rmrc· CVE-2022-25770Mautic has insufficient authentication in upgrade flow
Modified: 2/21/2025
HIGH7.0Packagist
GHSA-x3jx-5w6m-q2fc· CVE-2022-25768Mautic vulnerable to Improper Access Control in UI upgrade process
Modified: 2/28/2025
HIGH7.3Packagist
GHSA-xpc5-rr39-v8v2· CVE-2021-27917Mautic has an XSS in contact tracking and page hits report
Modified: 9/27/2024
MEDIUM4.8Packagist
GHSA-xv68-rrmw-9xwf· CVE-2024-47058Mautic vulnerable to Cross-site Scripting (XSS) - stored (edit form HTML field)
Modified: 9/27/2024