Skip to content
OpenAdvisories
Critical · 9.6 CVE-2022-25772 EUVD-2022-4785GHSA-pjpc-87mp-4332

Cross-site Scripting vulnerability in Mautic's tracking pixel functionality

Published Jun 20, 2022 · Updated Aug 3, 2024 · Assigned by Mautic

Description

A cross-site scripting (XSS) vulnerability in the web tracking component of Mautic before 4.3.0 allows remote attackers to inject executable javascript

Affected products

VendorProductAffectedFixed
Mautic Mautic unspecified – < 4.3.0 4.3.0

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist mautic/core < 4.3.0 4.3.0 GHSA-pjpc-87mp-4332

References