Skip to content
OpenAdvisories

Vendor

Mautic

40 known vulnerabilities.

Products

Mautic 36 mautic/core 3 Docker Mautic 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.0
    CVE-2025-13828

    Mautic user without privileged access to the Marketplace can install and uninstall composer packages

    SummaryA non privileged user can install and remove arbitrary packages via composer for a composer based installed, even if the flag in update settings for enable composer based update is unticked. ImpactA low-privileged user of the platform can install malic…

    Mautic Mautic mautic/core Packagist
  • Critical 9.1
    CVE-2024-47051 Public exploit

    Remote Code Execution & File Deletion in Asset Uploads

    This advisory addresses two critical security vulnerabilities present in Mautic versions before 5.2.3. These vulnerabilities could be exploited by authenticated users. * Remote Code Execution (RCE) via Asset Upload: A Remote Code Execution vulnerability has b…

    Mautic mautic/core mautic/core Packagist
  • Critical 9.6
    CVE-2022-25772 EPSS 63%

    Cross-site Scripting vulnerability in Mautic's tracking pixel functionality

    A cross-site scripting (XSS) vulnerability in the web tracking component of Mautic before 4.3.0 allows remote attackers to inject executable javascript

    Mautic Mautic mautic/core Packagist