7 matches found
CVE-2026-115193
A stored Cross-Site Scripting XSS vulnerability exists in the contact detail view of Mautic 7. Values of HTML-type custom contact fields are rendered without output sanitization. A user or integration able to write a value to such a field for example, through contact editing, the contact API, or ...
CVE-2026-115193
A stored Cross-Site Scripting XSS vulnerability exists in the contact detail view of Mautic 7. Values of HTML-type custom contact fields are rendered without output sanitization. A user or integration able to write a value to such a field for example, through contact editing, the contact API, or ...
CVE-2026-115193
A stored Cross-Site Scripting (XSS) vulnerability exists in the contact detail view of Mautic 7 . The root cause is the lack of output sanitization when rendering values from HTML-type custom contact fields . An attacker can inject a script payload by submitting a form, using the contact API, or ...
EUVD-2026-109797
A stored Cross-Site Scripting XSS vulnerability exists in the contact detail view of Mautic 7. Values of HTML-type custom contact fields are rendered without output sanitization. A user or integration able to write a value to such a field for example, through contact editing, the contact API, or ...
CVE-2022-0474
Full list of recipients from customer users in a contact field could be disclosed in notification emails event when the notification is set to be sent to each recipient individually. This issue affects: OTRS AG OTRSCustomContactFields 8.0.x version: 8.0.11 and prior versions...
CVE-2022-0474
Full list of recipients from customer users in a contact field could be disclosed in notification emails event when the notification is set to be sent to each recipient individually. This issue affects: OTRS AG OTRSCustomContactFields 8.0.x version: 8.0.11 and prior versions...
OTRS information leakage vulnerability
OTRS AG OTRSCustomContactFields is an OTRS custom contact fields plugin from OTRS Germany.An information disclosure vulnerability exists in OTRS AG OTRSCustomContactFields, which could be exploited by an attacker to obtain the full list of recipients in a contact field from a customer...