CVE-2026-115193

A stored Cross-Site Scripting (XSS) vulnerability exists in the contact detail view of Mautic 7 . The root cause is the lack of output sanitization when rendering values from HTML-type custom contact fields . An attacker can inject a script payload by submitting a form, using the contact API, or ...