Filtered by vendor Acquia Subscriptions
Filtered by product Mautic Subscriptions
Total 25 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2024-47050 1 Acquia 1 Mautic 2024-09-27 5.4 Medium
Prior to this patch being applied, Mautic's tracking was vulnerable to Cross-Site Scripting through the Page URL variable.
CVE-2021-27917 1 Acquia 1 Mautic 2024-09-27 7.3 High
Prior to this patch, a stored XSS vulnerability existed in the contact tracking and page hits report.
CVE-2022-25776 1 Acquia 1 Mautic 2024-09-24 8.3 High
Prior to the patched version, logged in users of Mautic are able to access areas of the application that they should be prevented from accessing. Users could potentially access sensitive data such as names and surnames, company names and stage names.
CVE-2022-25775 2 Acquia, Mautic 2 Mautic, Mautic 2024-09-24 6.6 Medium
Prior to the patched version, logged in users of Mautic are vulnerable to an SQL injection vulnerability in the Reports bundle. The user could retrieve and alter data like sensitive data, login, and depending on database permission the attacker can manipulate file systems.
CVE-2022-25774 1 Acquia 1 Mautic 2024-09-24 4.8 Medium
Prior to the patched version, logged in users of Mautic are vulnerable to a self XSS vulnerability in the notifications within Mautic. Users could inject malicious code into the notification when saving Dashboards.