Skip to content
OpenAdvisories

Package · Packagist

mautic/core

57 known vulnerabilities.

1 result · Clear filters · Feed

  • High 7.6
    CVE-2026-9809 Public exploit

    Mautic has Stored Cross-Site Scripting (XSS) in Projects Component

    A stored Cross-Site Scripting (XSS) vulnerability exists in the Projects component of Mautic 7. When displaying project tags and popovers on administrative detail views (such as campaigns, emails, or forms), user-supplied project names are rendered without pr…