mautic/core vulnerabilities (Packagist)
57 vulnerabilities.
-
mautic/corePackagist Mautic has Stored Cross-Site Scripting (XSS) in Project Option Selector 5.4 Medium -
mautic/corePackagist Mautic has Stored Cross-Site Scripting (XSS) in Projects Component 7.6 High -
mautic/corePackagist Mautic has an Authorization Bypass in API v2 Endpoints 7.1 High -
mautic/corePackagist Mautic vulnerable to Path Traversal via Campaign Import 9.9 Critical -
mautic/corePackagist Mautic has Server-Side Template Injection (SSTI) in Theme Templates 9.9 Critical -
mautic/corePackagist Mautic Focus component Vulnerable to SSRF 6.4 Medium -
mautic/corePackagist Mautic has SQL Injection in API Contact Filtering 7.1 High -
mautic/corePackagist SQL Injection in Contact Activity API Sorting 7.6 High -
mautic/corePackagist Mautic user without privileged access to the Marketplace can install and uninstall composer packages 9.0 Critical -
mautic/corePackagist Reflected XSS in lead:addLeadTags - Quick Add 4.8 Medium -
mautic/corePackagist User Enumeration via Response Timing 5.9 Medium -
mautic/corePackagist Secret data extraction via elfinder 5.5 Medium -
mautic/corePackagist SSRF via webhook function 2.7 Low -
mautic/corePackagist Open Redirect vulnerability on user unlock path 5.4 Medium -
mautic/corePackagist Segment cloning doesn't have a proper permission check 4.3 Medium -
mautic/corePackagist User name enumeration possible due to response time difference on password reset form 5.3 Medium -
mautic/corePackagist Mautic does not shield .env files from web traffic 5.1 Medium -
mautic/corePackagist Predictable Page Indexing Might Lead to Sensitive Data Exposure 6.5 Medium -
mautic/corePackagist Remote Code Execution & File Deletion in Asset Uploads 9.1 Critical -
mautic/corePackagist Improper Authorization in Reporting API 7.7 High -
mautic/corePackagist Relative Path Traversal in assets file upload 4.3 Medium -
mautic/corePackagist Insufficient authentication in upgrade flow 7.8 High -
mautic/corePackagist Users enumeration - weak password login 4.3 Medium -
mautic/corePackagist XSS in contact tracking and page hits report 7.3 High -
mautic/corePackagist XSS in contact/company tracking (no authentication) 5.4 Medium -
mautic/corePackagist Cross-site Scripting (XSS) - stored (edit form HTML field) 2.9 Low -
mautic/corePackagist Improper Access Control in UI upgrade process 7.0 High -
mautic/corePackagist Server-Side Request Forgery in Asset section 6.5 Medium -
mautic/corePackagist Sensitive Data Exposure due to inadequate user permission settings 8.3 High -
mautic/corePackagist SQL Injection in dynamic Reports 6.6 Medium -
mautic/corePackagist Relative Path Traversal / Arbitrary File Deletion in Mautic (GrapesJS Builder) 8.1 High -
mautic/corePackagist XSS in Notifications via saving Dashboards 4.8 Medium -
mautic/corePackagist XSS Cross-site Scripting Stored (XSS) - Description field 7.6 High -
mautic/corePackagist Cross-site Scripting vulnerability in Mautic's tracking pixel functionality 9.6 Critical -
mautic/corePackagist Improper regex in htaccess file 7.2 High -
mautic/corePackagist XSS vulnerability on password reset page 6.3 Medium -
mautic/corePackagist Use of a Broken or Risky Cryptographic Algorithm 3.5 Low -
mautic/corePackagist XSS vulnerability on asset view 7.1 High -
mautic/corePackagist XSS vulnerability on contacts view 8.3 High -
mautic/corePackagist Stored XSS vulnerability on Bounce Management Callback 8.2 High -
mautic/corePackagist Mautic vulnerable to secret data exfiltration via symfony parameters 5.8 Medium -
mautic/corePackagist Mautic is vulnerable to XSS vulnerability 9.6 Critical -
mautic/corePackagist XSS in Mautic No score -
mautic/corePackagist XSS vulnerability leveraged through referrers could allow un-authorized admin access in Mautic 9.6 Critical -
mautic/corePackagist Mautic stored Cross-site Scripting (XSS) 9.0 Critical -
mautic/corePackagist Mautic stored Cross-site Scripting (XSS) 9.0 Critical -
mautic/corePackagist XSS vulnerability in company name field in Mautic 6.1 Medium -
mautic/corePackagist XSS vulnerability in Author URL of themes in Mautic 6.1 Medium -
mautic/corePackagist CSV Injection vulnerability with exported contact lists in Mautic 9.8 Critical -
mautic/corePackagist XSS vulnerability in theme config file in Mautic 6.1 Medium - Show olderLoading…