CVE-2022-25772

Fixed upstream EPSS 63%CVSS 9.6

A cross-site scripting (XSS) vulnerability in the web tracking component of Mautic before 4.3.0 allows remote attackers to inject executable javascript