https://vulnogram.org/ Most recent CVEs assigned by Mautic (mautic). https://vulnogram.org/seaview/icons/mautic.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:06 GMT https://vulnogram.org/CVE-2026-9811 https://vulnogram.org/CVE-2026-9811 A stored Cross-Site Scripting (XSS) vulnerability exists in the project selector component of Mautic 7. When rendering selection menus for associating projects with system entities, the application fails to sanitize project names returned via AJAX be… Medium Fri, 29 May 2026 10:41:29 GMT https://vulnogram.org/CVE-2026-9809 https://vulnogram.org/CVE-2026-9809 A stored Cross-Site Scripting (XSS) vulnerability exists in the Projects component of Mautic 7. When displaying project tags and popovers on administrative detail views (such as campaigns, emails, or forms), user-supplied project names are rendered w… High Fri, 29 May 2026 10:36:38 GMT https://vulnogram.org/CVE-2026-9808 https://vulnogram.org/CVE-2026-9808 An authorization bypass vulnerability exists in the Mautic 7 API v2 endpoints (utilizing API Platform). Under certain conditions, roles configured with owner-scope restrictions (such as `viewown` or `editown`) are not properly enforced. This allows l… High Fri, 29 May 2026 10:30:23 GMT https://vulnogram.org/CVE-2026-9559 https://vulnogram.org/CVE-2026-9559 A path traversal vulnerability exists in the campaign import feature of Mautic 7. When extracting uploaded ZIP files during campaign imports, a flaw in the validation logic allows file paths to escape the intended temporary directories. An authentica… Critical Fri, 29 May 2026 10:19:48 GMT https://vulnogram.org/CVE-2026-9558 https://vulnogram.org/CVE-2026-9558 A Server-Side Template Injection (SSTI) vulnerability exists in Mautic's theme engine. The platform renders uploaded Twig templates without a sandbox or strict function restrictions. Authenticated users with permissions to create or upload themes can… Critical Fri, 29 May 2026 10:01:36 GMT https://vulnogram.org/CVE-2026-9557 https://vulnogram.org/CVE-2026-9557 A Server-Side Request Forgery (SSRF) vulnerability exists in Mautic's Focus component. Due to insufficient validation of user-supplied URLs, an authenticated user can trigger outbound HTTP requests from the hosting server, enabling internal network r… Medium Fri, 29 May 2026 09:38:40 GMT https://vulnogram.org/CVE-2026-4776 https://vulnogram.org/CVE-2026-4776 An SQL injection vulnerability exists in Mautic's API contact filtering mechanism. Due to insufficient recursive sanitization of nested query parameters, an authenticated API user can bypass input filtering and inject arbitrary SQL commands. High Fri, 29 May 2026 06:58:24 GMT https://vulnogram.org/CVE-2026-3105 https://vulnogram.org/CVE-2026-3105 SummaryThis advisory addresses a SQL injection vulnerability in the API endpoint used for retrieving contact activities. A vulnerability exists in the query construction for the Contact Activity timeline where the parameter responsible for determinin… High Tue, 24 Feb 2026 18:39:03 GMT https://vulnogram.org/CVE-2025-13828 https://vulnogram.org/CVE-2025-13828 SummaryA non privileged user can install and remove arbitrary packages via composer for a composer based installed, even if the flag in update settings for enable composer based update is unticked. ImpactA low-privileged user of the platform can inst… Critical Tue, 02 Dec 2025 16:54:58 GMT https://vulnogram.org/CVE-2025-13827 https://vulnogram.org/CVE-2025-13827 Summary Arbitrary files can be uploaded via the GrapesJS Builder, as the types of files that can be uploaded are not restricted. ImpactIf the media folder is not restricted from running files this can lead to a remote code execution. High Tue, 02 Dec 2025 16:54:39 GMT https://vulnogram.org/CVE-2025-9823 https://vulnogram.org/CVE-2025-9823 SummaryA Cross-Site Scripting (XSS) vulnerability allows an attacker to execute arbitrary JavaScript in the context of another user’s session. This occurs because user-supplied input is reflected back in the server’s response without proper sanitizat… Medium Wed, 03 Sep 2025 14:33:26 GMT https://vulnogram.org/CVE-2025-9824 https://vulnogram.org/CVE-2025-9824 ImpactThe attacker can validate if a user exists by checking the time login returns. This timing difference can be used to enumerate valid usernames, after which an attacker could attempt brute force attacks. PatchesThis vulnerability has been patche… Medium Network Exploitable Wed, 03 Sep 2025 14:25:06 GMT https://vulnogram.org/CVE-2025-9822 https://vulnogram.org/CVE-2025-9822 SummaryA user with administrator rights can change the configuration of the mautic application and extract secrets that are not normally available. ImpactAn administrator who usually does not have access to certain parameters, such as database creden… Medium Wed, 03 Sep 2025 13:55:12 GMT https://vulnogram.org/CVE-2025-9821 https://vulnogram.org/CVE-2025-9821 SummaryUsers with webhook permissions can conduct SSRF via webhooks. If they have permission to view the webhook logs, the (partial) request response is also disclosed DetailsWhen sending webhooks, the destination is not validated, causing SSRF. Impa… Low Wed, 03 Sep 2025 09:39:01 GMT https://vulnogram.org/CVE-2025-7381 https://vulnogram.org/CVE-2025-7381 ImpactThis is an information disclosure vulnerability originating from PHP's base image. This vulnerability exposes the PHP version through an X-Powered-By header, which attackers could exploit to fingerprint the server and identify potential weaknes… Medium Network Exploitable Wed, 09 Jul 2025 15:16:37 GMT https://vulnogram.org/CVE-2025-5256 https://vulnogram.org/CVE-2025-5256 SummaryThis advisory addresses an Open Redirection vulnerability in Mautic's user unlocking endpoint. This vulnerability could be exploited by an attacker to redirect legitimate users to malicious websites, potentially leading to phishing attacks or… Medium Network Exploitable Wed, 28 May 2025 17:47:05 GMT https://vulnogram.org/CVE-2024-47055 https://vulnogram.org/CVE-2024-47055 SummaryThis advisory addresses a security vulnerability in Mautic related to the segment cloning functionality. This vulnerability allows any authenticated user to clone segments without proper authorization checks. Insecure Direct Object Reference (… Medium Wed, 28 May 2025 17:34:32 GMT https://vulnogram.org/CVE-2024-47057 https://vulnogram.org/CVE-2024-47057 SummaryThis advisory addresses a security vulnerability in Mautic related to the "Forget your password" functionality. This vulnerability could be exploited by unauthenticated users to enumerate valid usernames. User Enumeration via Timing Attack: A… Medium Network Exploitable Wed, 28 May 2025 17:23:53 GMT https://vulnogram.org/CVE-2024-47056 https://vulnogram.org/CVE-2024-47056 SummaryThis advisory addresses a security vulnerability in Mautic where sensitive .env configuration files may be directly accessible via a web browser. This exposure could lead to the disclosure of sensitive information, including database credentia… Medium Wed, 28 May 2025 16:24:57 GMT https://vulnogram.org/CVE-2025-5257 https://vulnogram.org/CVE-2025-5257 SummaryThis advisory addresses a security vulnerability in Mautic where unpublished page previews could be accessed by unauthenticated users and potentially indexed by search engines. This could lead to the unintended disclosure of draft content or s… Medium Network Exploitable Wed, 28 May 2025 16:17:54 GMT https://vulnogram.org/CVE-2024-47051 https://vulnogram.org/CVE-2024-47051 This advisory addresses two critical security vulnerabilities present in Mautic versions before 5.2.3. These vulnerabilities could be exploited by authenticated users. * Remote Code Execution (RCE) via Asset Upload: A Remote Code Execution vulnerabil… Critical Wed, 26 Feb 2025 12:01:26 GMT https://vulnogram.org/CVE-2024-47053 https://vulnogram.org/CVE-2024-47053 This advisory addresses an authorization vulnerability in Mautic's HTTP Basic Authentication implementation. This flaw could allow unauthorized access to sensitive report data. * Improper Authorization: An authorization flaw exists in Mautic's API Au… High Wed, 26 Feb 2025 11:54:17 GMT https://vulnogram.org/CVE-2022-25773 https://vulnogram.org/CVE-2022-25773 This advisory addresses a file placement vulnerability that could allow assets to be uploaded to unintended directories on the server. * Improper Limitation of a Pathname to a Restricted Directory: A vulnerability exists in the asset upload functiona… Medium Wed, 26 Feb 2025 11:48:33 GMT https://vulnogram.org/CVE-2022-25770 https://vulnogram.org/CVE-2022-25770 Mautic allows you to update the application via an upgrade script. The upgrade logic isn't shielded off correctly, which may lead to vulnerable situation. This vulnerability is mitigated by the fact that Mautic needs to be installed in a certain way… High Wed, 18 Sep 2024 21:26:34 GMT https://vulnogram.org/CVE-2024-47059 https://vulnogram.org/CVE-2024-47059 When logging in with the correct username and incorrect weak password, the user receives the notification, that their password is too weak. However when an incorrect username is provided alongside with a weak password, the application responds with ’… Medium Wed, 18 Sep 2024 21:19:26 GMT https://vulnogram.org/CVE-2021-27917 https://vulnogram.org/CVE-2021-27917 Prior to this patch, a stored XSS vulnerability existed in the contact tracking and page hits report. High Network Exploitable Wed, 18 Sep 2024 21:09:09 GMT https://vulnogram.org/CVE-2024-47050 https://vulnogram.org/CVE-2024-47050 Prior to this patch being applied, Mautic's tracking was vulnerable to Cross-Site Scripting through the Page URL variable. Medium Network Exploitable Wed, 18 Sep 2024 21:04:46 GMT https://vulnogram.org/CVE-2024-47058 https://vulnogram.org/CVE-2024-47058 With access to edit a Mautic form, the attacker can add Cross-Site Scripting stored in the html filed. This could be used to steal sensitive information from the user's current session. Low Wed, 18 Sep 2024 21:00:28 GMT https://vulnogram.org/CVE-2022-25768 https://vulnogram.org/CVE-2022-25768 The logic in place to facilitate the update process via the user interface lacks access control to verify if permission exists to perform the tasks. Prior to this patch being applied it might be possible for an attacker to access the Mautic version n… High Network Exploitable Wed, 18 Sep 2024 20:55:53 GMT https://vulnogram.org/CVE-2022-25777 https://vulnogram.org/CVE-2022-25777 Prior to the patched version, an authenticated user of Mautic could read system files and access the internal addresses of the application due to a Server-Side Request Forgery (SSRF) vulnerability. Medium Wed, 18 Sep 2024 15:13:52 GMT https://vulnogram.org/CVE-2022-25776 https://vulnogram.org/CVE-2022-25776 Prior to the patched version, logged in users of Mautic are able to access areas of the application that they should be prevented from accessing. Users could potentially access sensitive data such as names and surnames, company names and stage names. High Wed, 18 Sep 2024 15:06:54 GMT https://vulnogram.org/CVE-2022-25775 https://vulnogram.org/CVE-2022-25775 Prior to the patched version, logged in users of Mautic are vulnerable to an SQL injection vulnerability in the Reports bundle. The user could retrieve and alter data like sensitive data, login, and depending on database permission the attacker can m… Medium Wed, 18 Sep 2024 15:01:23 GMT https://vulnogram.org/CVE-2022-25774 https://vulnogram.org/CVE-2022-25774 Prior to the patched version, logged in users of Mautic are vulnerable to a self XSS vulnerability in the notifications within Mautic. Users could inject malicious code into the notification when saving Dashboards. Medium Wed, 18 Sep 2024 14:54:36 GMT https://vulnogram.org/CVE-2022-25769 https://vulnogram.org/CVE-2022-25769 ImpactThe default .htaccess file has some restrictions in the access to PHP files to only allow specific PHP files to be executed in the root of the application. This logic isn't correct, as the regex in the second FilesMatch only checks the filename… High Wed, 18 Sep 2024 14:47:09 GMT https://vulnogram.org/CVE-2021-27916 https://vulnogram.org/CVE-2021-27916 Prior to the patched version, logged in users of Mautic are vulnerable to Relative Path Traversal/Arbitrary File Deletion. Regardless of the level of access the Mautic user had, they could delete files other than those in the media folders such as sy… High Tue, 17 Sep 2024 14:20:03 GMT https://vulnogram.org/CVE-2021-27915 https://vulnogram.org/CVE-2021-27915 Prior to the patched version, there is an XSS vulnerability in the description fields within the Mautic application which could be exploited by a logged in user of Mautic with the appropriate permissions. This could lead to the user having elevated a… High Tue, 17 Sep 2024 14:02:09 GMT https://vulnogram.org/CVE-2022-25772 https://vulnogram.org/CVE-2022-25772 A cross-site scripting (XSS) vulnerability in the web tracking component of Mautic before 4.3.0 allows remote attackers to inject executable javascript Critical Network Exploitable Mon, 20 Jun 2022 00:00:00 GMT https://vulnogram.org/CVE-2021-27914 https://vulnogram.org/CVE-2021-27914 A cross-site scripting (XSS) vulnerability in the installer component of Mautic before 4.3.0 allows admins to inject executable javascript High Wed, 01 Jun 2022 15:20:10 GMT https://vulnogram.org/CVE-2021-27909 https://vulnogram.org/CVE-2021-27909 For Mautic versions prior to 3.3.4/4.0.0, there is an XSS vulnerability on Mautic's password reset page where a vulnerable parameter, "bundle," in the URL could allow an attacker to execute Javascript code. The attacker would be required to convince… Medium Network Exploitable Mon, 30 Aug 2021 16:00:10 GMT https://vulnogram.org/CVE-2021-27913 https://vulnogram.org/CVE-2021-27913 The function mt_rand is used to generate session tokens, this function is cryptographically flawed due to its nature being one pseudorandomness, an attacker can take advantage of the cryptographically insecure nature of this function to enumerate ses… Low Mon, 30 Aug 2021 15:55:21 GMT https://vulnogram.org/CVE-2021-27912 https://vulnogram.org/CVE-2021-27912 Mautic versions before 3.3.4/4.0.0 are vulnerable to an inline JS XSS attack when viewing Mautic assets by utilizing inline JS in the title and adding a broken image URL as a remote asset. This can only be leveraged by an authenticated user with perm… High Mon, 30 Aug 2021 15:55:17 GMT https://vulnogram.org/CVE-2021-27911 https://vulnogram.org/CVE-2021-27911 Mautic versions before 3.3.4/4.0.0 are vulnerable to an inline JS XSS attack through the contact's first or last name and triggered when viewing a contact's details page then clicking on the action drop down and hovering over the Campaigns button. Co… High Network Exploitable Mon, 30 Aug 2021 15:55:12 GMT https://vulnogram.org/CVE-2021-27910 https://vulnogram.org/CVE-2021-27910 Insufficient sanitization / filtering allows for arbitrary JavaScript Injection in Mautic using the bounce management callback function. The values submitted in the "error" and "error_related_to" parameters of the POST request of the bounce managemen… High Network Exploitable Mon, 30 Aug 2021 15:55:08 GMT https://vulnogram.org/CVE-2021-27908 https://vulnogram.org/CVE-2021-27908 In all versions prior to Mautic 3.3.2, secret parameters such as database credentials could be exposed publicly by an authorized admin user through leveraging Symfony parameter syntax in any of the free text fields in Mautic’s configuration that are… Medium Tue, 23 Mar 2021 19:11:56 GMT