6722 matches found
CVE-2025-48873
CVE-2025-5256 describes an Open Redirection vulnerability in Mautic, exploitable via the /s/action/unlock/user.user/0 endpoint where the returnUrl parameter is not properly validated. This can allow an attacker to redirect users to arbitrary external sites. The root cause is inadequate validation...
CVE-2024-23433
CVE-2024-23433 is rejected/not used and does not represent an active vulnerability entry.
CVE-2020-15245: Ability to switch customer email address on account detail page and stay verified
Impact The user may register in a shop by email [email protected], verify it, change it to the mail [email protected] and stay verified and enabled. This may lead to having accounts addressed to totally different emails, that were verified. Note, that this way one is not able to take over any...