Skip to content
OpenAdvisories

Package · Packagist

mautic/core-lib

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

5 results · Feed

  • High 7.8
    CVE-2022-25770

    Insufficient authentication in upgrade flow

    Mautic allows you to update the application via an upgrade script. The upgrade logic isn't shielded off correctly, which may lead to vulnerable situation. This vulnerability is mitigated by the fact that Mautic needs to be installed in a certain way to be vul…

    Mautic Mautic mautic/core mautic/core-lib Packagist
  • High 7.3
    CVE-2021-27917

    XSS in contact tracking and page hits report

    Prior to this patch, a stored XSS vulnerability existed in the contact tracking and page hits report.

    Mautic Mautic mautic/core mautic/core-lib Packagist
  • Medium 5.4
    CVE-2024-47050

    XSS in contact/company tracking (no authentication)

    Prior to this patch being applied, Mautic's tracking was vulnerable to Cross-Site Scripting through the Page URL variable.

    Mautic Mautic mautic/core mautic/core-lib Packagist
  • Low 2.9
    CVE-2024-47058

    Cross-site Scripting (XSS) - stored (edit form HTML field)

    With access to edit a Mautic form, the attacker can add Cross-Site Scripting stored in the html filed. This could be used to steal sensitive information from the user's current session.

    Mautic Mautic mautic/core mautic/core-lib Packagist
  • High 7.0
    CVE-2022-25768

    Improper Access Control in UI upgrade process

    The logic in place to facilitate the update process via the user interface lacks access control to verify if permission exists to perform the tasks. Prior to this patch being applied it might be possible for an attacker to access the Mautic version number or …

    Mautic Mautic mautic/core mautic/core-lib Packagist