Skip to content
OpenAdvisories

Vendor

Mautic

40 known vulnerabilities.

Products

Mautic 36 mautic/core 3 Docker Mautic 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Low 2.7
    CVE-2025-9821

    SSRF via webhook function

    SummaryUsers with webhook permissions can conduct SSRF via webhooks. If they have permission to view the webhook logs, the (partial) request response is also disclosed DetailsWhen sending webhooks, the destination is not validated, causing SSRF. ImpactBypass …

    Mautic Mautic mautic/core Packagist
  • Low 2.9
    CVE-2024-47058

    Cross-site Scripting (XSS) - stored (edit form HTML field)

    With access to edit a Mautic form, the attacker can add Cross-Site Scripting stored in the html filed. This could be used to steal sensitive information from the user's current session.

    Mautic Mautic mautic/core mautic/core-lib Packagist
  • Low 3.5
    CVE-2021-27913

    Use of a Broken or Risky Cryptographic Algorithm

    The function mt_rand is used to generate session tokens, this function is cryptographically flawed due to its nature being one pseudorandomness, an attacker can take advantage of the cryptographically insecure nature of this function to enumerate session toke…

    Mautic Mautic mautic/core Packagist