622 matches found
CVE-2020-35129
Mautic before 3.2.4 is affected by stored XSS. An attacker with access to Social Monitoring, an application feature, could attack other users, including administrators. For example, an attacker could load an externally drafted JavaScript file that would allow them to eventually perform actions on...
Mautic 跨站脚本漏洞
Mautic is an open source marketing automation software. The software monitors and manages websites, sends emails and manages customer resources. A cross-site scripting vulnerability exists in versions prior to Mautic 3.2.4, which can be exploited by an attacker to load an external JavaScript file...
Mautic 跨站脚本漏洞
Mautic is an open source marketing automation software. The software monitors and manages websites, sends emails and manages customer resources. A security vulnerability exists in versions prior to Mautic 3.2.4, which can be exploited by attackers to perform actions on targeted users. These actio...
CVE-2018-11200
An issue was discovered in Mautic 2.13.1. It has Stored XSS via the company name field...
CVE-2018-11200
An issue was discovered in Mautic 2.13.1. It has Stored XSS via the company name field...
Cross site scripting
An issue was discovered in Mautic 2.13.1. It has Stored XSS via the company name field...
CVE-2018-11200
An issue was discovered in Mautic 2.13.1. It has Stored XSS via the company name field...
CVE-2018-11200
CVE-2018-11200 affects Mautic 2.13.1, with a Stored XSS vulnerability in the company name field. Exploitation can lead to arbitrary JavaScript execution in a user’s browser. Remediation: upgrade to 2.14.0 or later as noted in advisories. The connected sources confirm the issue and release of a pa...
Mautic cross-site scripting vulnerability (CNVD-2019-31196)
Mautic is an open source marketing automation software. The software monitors and manages websites, sends emails and manages customer resources. A cross-site scripting vulnerability exists in Mautic version 2.13.1, which can be exploited by an attacker to execute client-side code...
CVE-2018-11198
An issue was discovered in Mautic 2.13.1. There is Stored XSS via the authorUrl field in config.json...
CVE-2018-11198
An issue was discovered in Mautic 2.13.1. There is Stored XSS via the authorUrl field in config.json...
Design/Logic Flaw
An issue was discovered in Mautic 2.13.1. There is Stored XSS via the authorUrl field in config.json...
CVE-2018-11198
An issue was discovered in Mautic 2.13.1. There is Stored XSS via the authorUrl field in config.json...
CVE-2018-11198
CVE-2018-11198 affects Mautic 2.13.1, introducing a stored XSS via the authorUrl field in config.json. The issue enables injection of arbitrary JavaScript that can execute in a victim’s browser when viewing affected content. Multiple connected sources confirm the vulnerability and point to the sa...
Mautic CSV Injection Vulnerability
Mautic is an open source marketing automation software. The software monitors and manages websites, sends emails and manages customer resources. A CSV injection vulnerability exists in Mautic versions prior to 2.13.0. An attacker can exploit this vulnerability by sending a specially crafted reque...
Mautic Information Disclosure Vulnerability
Mautic is an open source marketing automation software. The software monitors and manages websites, sends emails and manages customer resources. A security vulnerability exists in Mautic version 1.x and version 2.x prior to 2.13.0. An attacker could exploit the vulnerability to retrieve contact...
Mautic cross-site scripting vulnerability (CNVD-2018-08601)
Mautic is an open source marketing automation software. The software monitors and manages websites, sends emails and manages customer resources. A cross-site scripting vulnerability exists in versions of Mautic prior to 2.13.0. A remote attacker can exploit this vulnerability to inject arbitrary...
Mautic <= 2.12 Information Disclosure Vulnerability
Mautic is prone to an information disclosure vulnerability via cookie manipulation. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...