Login Request a demo
MA
Product
Mautic
by Acquia · last CVE Feb 24, 2026
35
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Vulnerabilities35In the news0Timeline
Severity mix
Critical 6High 7Medium 21Low 1
Severity
All severities35Critical6High7Medium21Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Mautic to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-47051
9.9
2%
Feb 26
Remote Code Execution & File Deletion in Asset Uploads
Affected: before 5.2.3
CVE-2020-35125
9.6
3%
Feb 9
A cross-site scripting (XSS) vulnerability in the forms component of Mautic before 3.2.4 allows remote attackers to inject executable JavaScript via mautic[return] (a different…
Affected: before 2.16.5; 3.0.0 before 3.2.4
CVE-2020-35124
9.6
2%
Jan 28
A cross-site scripting (XSS) vulnerability in the assets component of Mautic before 3.2.4 allows remote attackers to inject executable JavaScript through the Referer header of…
Affected: before 3.2.4
CVE-2022-25769
9.1
1%
Sep 18
Improper regex in htaccess file
Affected: before 3.3.5; 4.0.0 before 4.2.0
CVE-2021-27915
9.0
1%
Sep 17
XSS Cross-site Scripting Stored (XSS) - Description field
Affected: 1.0.0 before 4.4.12; 1.0.0; 1.0.0; 1.0.0; 1.0.0; 1.0.0; +3 more
CVE-2020-35128
9.0
2%
Jan 19
Mautic before 3.2.4 is affected by stored XSS
Affected: 2.0.0 before 2.16.5; 3.2.0 before 3.2.4
Showing 6