Patchwire CVEs, their patch status, and feeds to follow them

CVE-2022-25774

Fixed upstream EPSS <1%CVSS 4.8

Prior to the patched version, logged in users of Mautic are vulnerable to a self XSS vulnerability in the notifications within Mautic. Users could inject malicious code into the notification when saving Dashboards.

Published 2024-09-18 · CVE record · OSV

Products: Mautic

Fixed upstream

EcosystemPackageFixed in
Packagistmautic/core4.4.12