CVE-2026-115196

Mautic is affected by an Open Redirect vulnerability in the public form submission endpoint (PLATFORM_ENDPOINT ). The application fails to validate that the return address provided during form submission points to a trusted host. Consequently, an unauthenticated attacker can craft a form that red...