CVE-2026-9809

CVE-2026-9809 CVE-2026-9809 是一个影响 Mautic 7（7.0.0 至 7.1.1 版本）的存储型跨站脚本（Stored XSS）漏洞。该缺陷存在于 Projects 组件中，项目名称会在管理页面（如营销活动、电子邮件和表单）上以标签和悬停弹出层的形式显示，但未经过正确的输出清理。拥有创建或编辑项目权限的已认证用户可以在项目名称中存储恶意 HTML/JavaScript。当管理员随后查看与该项目关联的实体并悬停在其标签上时，恶意脚本会在管理员的浏览器中执行。 受影响软件 属性| 值 ---|--- 产品| Mautic 受影响版本| 7.0.0 – 7.1....

EUVD-2026-33279

Mautic has Stored Cross-Site Scripting XSS in Projects Component...

Cross-site Scripting (XSS)

Overview Affected versions of this package are vulnerable to Cross-site Scripting XSS via the Projects component when displaying project tags and popovers in administrative detail views due to improper sanitization of user-supplied project names. An attacker can execute arbitrary scripts in the...

CVE-2026-9809

A stored Cross-Site Scripting XSS vulnerability exists in the Projects component of Mautic 7. When displaying project tags and popovers on administrative detail views such as campaigns, emails, or forms, user-supplied project names are rendered without proper sanitization. An authenticated user...

CVE-2026-9809

A stored Cross-Site Scripting XSS vulnerability exists in the Projects component of Mautic 7. When displaying project tags and popovers on administrative detail views such as campaigns, emails, or forms, user-supplied project names are rendered without proper sanitization. An authenticated user...

CVE-2022-44956

webtareas 2.4p5 was discovered to contain a cross-site scripting XSS vulnerability in the component /projects/listprojects.php. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name field...

CVE-2017-2374

An issue was discovered in certain Apple products. GarageBand before 10.1.6 is affected. The issue involves the "Projects" component. It allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted GarageBand project file...