mautic/core vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Get a demo

Browse by ecosystem

npmPyPIMavenGoRubyGemsCargoNuGetComposerpubSwiftGitHub Actions
CVE-IDSeverityPackage summary
CVE-2024-47058Mediummautic/core: Mautic vulnerable to Cross-site Scripting (XSS) - stored (edit form HTML field)CVE-2022-25768Highmautic/core-lib: Mautic vulnerable to Improper Access Control in UI upgrade processCVE-2020-35125Criticalmautic/core: Mautic is vulnerable to XSS vulnerabilityCVE-2022-25777Mediummautic/core: Mautic: MST-48 Server-Side Request Forgery in Asset section CVE-2022-25776Highmautic/core: Mautic Sensitive Data Exposure due to inadequate user permission settingsCVE-2022-25775Mediummautic/core: Mautic SQL Injection in dynamic ReportsCVE-2021-27916Highmautic/core: Mautic vulnerable to Relative Path Traversal / Arbitrary File Deletion due to GrapesJS builderCVE-2022-25774Mediummautic/core: Mautic vulnerable to cross-site scripting in notifications via saving DashboardsCVE-2021-27915Highmautic/core: Mautic vulnerable to stored cross-site scripting in description fieldCVE-2022-25772Criticalmautic/core: Cross-site Scripting vulnerability in Mautic's tracking pixel functionalityCVE-2020-35129Criticalmautic/core: Mautic stored Cross-site Scripting (XSS)CVE-2020-35128Criticalmautic/core: Mautic stored Cross-site Scripting (XSS)CVE-2017-1000506Mediummautic/core: Mautic Cross Site Scripting (XSS) vulnerabilityCVE-2017-1000046Highmautic/core: Sensitive Cookie Without HttpOnly and Secure FlagCVE-2017-8874Highmautic/core: Mautic Cross-Site Request Forgery (CSRF)CVE-2022-25769Mediummautic/core: Improper regex in htaccess fileCVE-2021-27913Lowmautic/core: Use of a Broken or Risky Cryptographic AlgorithmCVE-2021-27909Mediummautic/core: XSS vulnerability on password reset pageCVE-2021-27910Highmautic/core: Stored XSS vulnerability on Bounce Management CallbackCVE-2021-27911Highmautic/core: XSS vulnerability on contacts viewCVE-2021-27912Highmautic/core: XSS vulnerability on asset viewCVE-2021-27908Mediummautic/core: Mautic vulnerable to secret data exfiltration via symfony parametersCVE-2021-3142Highmautic/core: XSS in MauticCVE-2018-8092Mediummautic/core: CSV Injection vulnerability with exported contact lists in MauticCVE-2018-11200Mediummautic/core: XSS vulnerability in company name field in Mautic

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo
Get a personalized demo