CVE-2022-25772

A cross-site scripting XSS vulnerability in the web tracking component of Mautic before 4.3.0 allows remote attackers to inject executable javascript...

CVE-2022-25772

The CVE-2022-25772 entry corresponds to a cross-site scripting vulnerability in Mautic’s web tracking component present in versions before 4.3.0. The root cause is improper sanitization of user metadata collected from tracking pixels, enabling remote attackers to inject executable JavaScript. Pub...

CVE-2022-25772

A cross-site scripting XSS vulnerability in the web tracking component of Mautic before 4.3.0 allows remote attackers to inject executable javascript...

Mautic Cross-Site Scripting Vulnerability (CNVD-2022-66676)

Mautic is a marketing automation software. A cross-site scripting vulnerability exists in versions of Mautic prior to 4.3.0. The vulnerability stems from the failure of the installer logic to adequately filter the input of installation information, which could be exploited to inject executable...

CVE-2021-27914

A cross-site scripting XSS vulnerability in the installer component of Mautic before 4.3.0 allows admins to inject executable javascript...

CVE-2021-27914

A cross-site scripting XSS vulnerability in the installer component of Mautic before 4.3.0 allows admins to inject executable javascript...

CVE-2021-27914

A cross-site scripting XSS vulnerability in the installer component of Mautic before 4.3.0 allows admins to inject executable javascript...

Cross site scripting

A cross-site scripting XSS vulnerability in the installer component of Mautic before 4.3.0 allows admins to inject executable javascript...

CVE-2021-27914

A cross-site scripting XSS vulnerability in the installer component of Mautic before 4.3.0 allows admins to inject executable javascript...

CVE-2021-27914

CVE-2021-27914 : A cross-site scripting (XSS) vulnerability exists in the installer component of Mautic prior to version 4.3.0. The root cause is inadequate sanitization/ filtering of installation input in the installer logic, enabling admins to inject executable JavaScript. Affected products are...

Mautic 跨站脚本漏洞

Mautic is a marketing automation software. A cross-site scripting vulnerability exists in versions of Mautic prior to 4.3.0. The vulnerability stems from the failure of the installer logic to adequately filter the input of installation information, which could be exploited to inject executable...

Cross-site Scripting (XSS)

mautic/core is vulnerable to cross site scripting. The vulnerability exists due to a lack of sanitization of useragent before displaying, allowing an attacker to inject maliciously crafted script into the system...

Cross-site Scripting vulnerability in Mautic's tracking pixel functionality

Impact Mautic allows you to track open rates by using tracking pixels. The tracking information is stored together with extra metadata of the tracking request. The output isn't sufficiently filtered when showing the metadata of the tracking information, which may lead to a vulnerable situation...

GHSA-PJPC-87MP-4332 Cross-site Scripting vulnerability in Mautic's tracking pixel functionality

Impact Mautic allows you to track open rates by using tracking pixels. The tracking information is stored together with extra metadata of the tracking request. The output isn't sufficiently filtered when showing the metadata of the tracking information, which may lead to a vulnerable situation...

Mautic stored Cross-site Scripting (XSS)

Mautic before 3.2.4 is affected by stored XSS. An attacker with access to Social Monitoring, an application feature, could attack other users, including administrators. For example, an attacker could load an externally drafted JavaScript file that would allow them to eventually perform actions on...

GHSA-3PX5-WJH3-9X6R Mautic stored Cross-site Scripting (XSS)

Mautic before 3.2.4 is affected by stored XSS. An attacker with access to Social Monitoring, an application feature, could attack other users, including administrators. For example, an attacker could load an externally drafted JavaScript file that would allow them to eventually perform actions on...

GHSA-98J2-3JV7-274M Mautic stored Cross-site Scripting (XSS)

Mautic before 3.2.4 is affected by stored XSS. An attacker with permission to manage companies, an application feature, could attack other users, including administrators. For example, by loading an externally crafted JavaScript file, an attacker could eventually perform actions as the target use...

Mautic stored Cross-site Scripting (XSS)

Mautic before 3.2.4 is affected by stored XSS. An attacker with permission to manage companies, an application feature, could attack other users, including administrators. For example, by loading an externally crafted JavaScript file, an attacker could eventually perform actions as the target use...

GHSA-358V-CQJC-2PCQ Mautic Cross Site Scripting (XSS) vulnerability

Mautic version 2.11.0 and earlier contains a Cross Site Scripting XSS vulnerability in Company's name that can result in denial of service and execution of javascript code...

Mautic Cross Site Scripting (XSS) vulnerability

Mautic version 2.11.0 and earlier contains a Cross Site Scripting XSS vulnerability in Company's name that can result in denial of service and execution of javascript code...