mautic/core-lib vulnerabilities (Packagist)

5 vulnerabilities.

• mautic/core-lib Packagist Insufficient authentication in upgrade flow CVE-2022-25770 Fix available 7.8 HighSeptember 18, 2024
• mautic/core-lib Packagist XSS in contact tracking and page hits report CVE-2021-27917 Fix available 7.3 HighSeptember 18, 2024
• mautic/core-lib Packagist XSS in contact/company tracking (no authentication) CVE-2024-47050 Fix available 5.4 MediumSeptember 18, 2024
• mautic/core-lib Packagist Cross-site Scripting (XSS) - stored (edit form HTML field) CVE-2024-47058 Fix available 2.9 LowSeptember 18, 2024
• mautic/core-lib Packagist Improper Access Control in UI upgrade process CVE-2022-25768 Fix available 7.0 HighSeptember 18, 2024