MA
Product
Mautic
34
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 8Medium 20Low 1
Watch
Add Mautic to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-8092 | 9.8 | Apr 18 | Mautic before 2.13.0 allows CSV injection Affected: before 2.13.0 |
| CVE-2022-25769 | 9.1 | Sep 18 | Improper regex in htaccess file Affected: < 3.3.5; < 4.2.0 |
| CVE-2025-13828 | 9.0 | Dec 2 | Mautic user without privileged access to the Marketplace can install and uninstall composer packages Affected: <4.4.18, <5.2.9, <6.0.7 |
| CVE-2021-27915 | 9.0 | Sep 17 | XSS Cross-site Scripting Stored (XSS) - Description field Affected: >= 1.0.0-beta2 through <= 4.4.11 |
| CVE-2020-35129 | 9.0 | Jan 19 | Mautic before 3.2.4 is affected by stored XSS Affected: before 3.2.4 |
Showing 5