CVE-2026-71245 | High | 7.1 | 2026-08-05 | Mautic's getLeadIdsByFieldValueAction (LeadBundle/Controller/AjaxController.php) reads a field parameter from the request, sanitizes it only with InputHelper… |
CVE-2026-3105 | High | 7.6 | 2026-02-24 | SummaryThis advisory addresses a SQL injection vulnerability in the API endpoint used for retrieving contact activities. A vulnerability exists in the query co… |
CVE-2025-13828 | | | 2025-12-02 | SummaryA non privileged user can install and remove arbitrary packages via composer for a composer based installed, even if the flag in update settings for ena… |
CVE-2025-13827 | | | 2025-12-02 | Summary
Arbitrary files can be uploaded via the GrapesJS Builder, as the types of files that can be uploaded are not restricted.
ImpactIf the media folder is… |
CVE-2025-9824 | Medium | 5.9 | 2025-09-03 | ImpactThe attacker can validate if a user exists by checking the time login returns. This timing difference can be used to enumerate valid usernames, after whi… |
CVE-2025-9823 | | | 2025-09-03 | SummaryA Cross-Site Scripting (XSS) vulnerability allows an attacker to execute arbitrary JavaScript in the context of another user’s session. This occurs beca… |
CVE-2025-9822 | Medium | 5.5 | 2025-09-03 | SummaryA user with administrator rights can change the configuration of the mautic application and extract secrets that are not normally available.
ImpactAn a… |
CVE-2025-9821 | Low | 2.7 | 2025-09-03 | SummaryUsers with webhook permissions can conduct SSRF via webhooks. If they have permission to view the webhook logs, the (partial) request response is also d… |
CVE-2025-7381 | Medium | 5.3 | 2025-07-09 | ImpactThis is an information disclosure vulnerability originating from PHP's base image. This vulnerability exposes the PHP version through an X-Powered-By hea… |
CVE-2025-5256 | Medium | 5.4 | 2025-05-28 | SummaryThis advisory addresses an Open Redirection vulnerability in Mautic's user unlocking endpoint. This vulnerability could be exploited by an attacker to r… |
CVE-2024-47057 | Medium | 5.3 | 2025-05-28 | SummaryThis advisory addresses a security vulnerability in Mautic related to the "Forget your password" functionality. This vulnerability could be exploited by… |
CVE-2024-47055 | Medium | 4.3 | 2025-05-28 | SummaryThis advisory addresses a security vulnerability in Mautic related to the segment cloning functionality. This vulnerability allows any authenticated use… |
CVE-2025-5257 | Medium | 6.5 | 2025-05-28 | SummaryThis advisory addresses a security vulnerability in Mautic where unpublished page previews could be accessed by unauthenticated users and potentially in… |
CVE-2024-47056 | Medium | 5.1 | 2025-05-28 | SummaryThis advisory addresses a security vulnerability in Mautic where sensitive .env configuration files may be directly accessible via a web browser. This e… |
CVE-2024-47053 | High | 7.7 | 2025-02-26 | This advisory addresses an authorization vulnerability in Mautic's HTTP Basic Authentication implementation. This flaw could allow unauthorized access to sensi… |
CVE-2024-47051 | Critical | 9.1 | 2025-02-26 | This advisory addresses two critical security vulnerabilities present in Mautic versions before 5.2.3. These vulnerabilities could be exploited by authenticate… |
CVE-2022-25773 | Medium | 4.3 | 2025-02-26 | This advisory addresses a file placement vulnerability that could allow assets to be uploaded to unintended directories on the server.
* Improper Limitatio… |
CVE-2024-47059 | Medium | 4.3 | 2024-09-18 | When logging in with the correct username and incorrect weak password, the user receives the notification, that their password is too weak.
However when an in… |
CVE-2022-25770 | High | 7.8 | 2024-09-18 | Mautic allows you to update the application via an upgrade script.
The upgrade logic isn't shielded off correctly, which may lead to vulnerable situation.
Th… |
CVE-2021-27917 | High | 7.3 | 2024-09-18 | Prior to this patch, a stored XSS vulnerability existed in the contact tracking and page hits report. |
CVE-2024-47058 | Low | 2.9 | 2024-09-18 | With access to edit a Mautic form, the attacker can add Cross-Site Scripting stored in the html filed. This could be used to steal sensitive information from t… |
CVE-2024-47050 | Medium | 5.4 | 2024-09-18 | Prior to this patch being applied, Mautic's tracking was vulnerable to Cross-Site Scripting through the Page URL variable. |
CVE-2022-25768 | High | 7.0 | 2024-09-18 | The logic in place to facilitate the update process via the user interface lacks access control to verify if permission exists to perform the tasks. Prior to t… |
CVE-2022-25777 | Medium | 6.5 | 2024-09-18 | Prior to the patched version, an authenticated user of Mautic could read system files and access the internal addresses of the application due to a Server-Side… |
CVE-2022-25776 | High | 8.3 | 2024-09-18 | Prior to the patched version, logged in users of Mautic are able to access areas of the application that they should be prevented from accessing.
Users could… |
CVE-2022-25775 | Medium | 6.6 | 2024-09-18 | Prior to the patched version, logged in users of Mautic are vulnerable to an SQL injection vulnerability in the Reports bundle.
The user could retrieve and al… |
CVE-2022-25774 | Medium | 4.8 | 2024-09-18 | Prior to the patched version, logged in users of Mautic are vulnerable to a self XSS vulnerability in the notifications within Mautic.
Users could inject mali… |
CVE-2022-25769 | High | 7.2 | 2024-09-18 | ImpactThe default .htaccess file has some restrictions in the access to PHP files to only allow specific PHP files to be executed in the root of the applicatio… |
CVE-2021-27916 | High | 8.1 | 2024-09-17 | Prior to the patched version, logged in users of Mautic are vulnerable to Relative Path Traversal/Arbitrary File Deletion. Regardless of the level of access th… |
CVE-2021-27915 | High | 7.6 | 2024-09-17 | Prior to the patched version, there is an XSS vulnerability in the description fields within the Mautic application which could be exploited by a logged in use… |
CVE-2024-3448 | Medium | 5.0 | 2024-04-10 | Users with low privileges can perform certain AJAX actions. In this vulnerability instance, improper access to ajax?action=plugin:focus:checkIframeAvailabilit… |
CVE-2024-2731 | Medium | 5.4 | 2024-04-10 | Users with low privileges (all permissions deselected in the administrator permissions settings) can view certain pages that expose sensitive information such… |
CVE-2024-2730 | Medium | 5.3 | 2024-04-10 | Mautic uses predictable page indices for unpublished landing pages, their content can be accessed by unauthenticated users under public preview URLs which coul… |
CVE-2022-25772 | Critical | 9.6 | 2022-06-20 | A cross-site scripting (XSS) vulnerability in the web tracking component of Mautic before 4.3.0 allows remote attackers to inject executable javascript |
CVE-2021-27914 | High | 7.6 | 2022-06-01 | A cross-site scripting (XSS) vulnerability in the installer component of Mautic before 4.3.0 allows admins to inject executable javascript |
CVE-2021-27913 | Low | 3.5 | 2021-08-30 | The function mt_rand is used to generate session tokens, this function is cryptographically flawed due to its nature being one pseudorandomness, an attacker ca… |
CVE-2021-27912 | High | 7.1 | 2021-08-30 | Mautic versions before 3.3.4/4.0.0 are vulnerable to an inline JS XSS attack when viewing Mautic assets by utilizing inline JS in the title and adding a broken… |
CVE-2021-27911 | High | 8.3 | 2021-08-30 | Mautic versions before 3.3.4/4.0.0 are vulnerable to an inline JS XSS attack through the contact's first or last name and triggered when viewing a contact's de… |
CVE-2021-27910 | High | 8.2 | 2021-08-30 | Insufficient sanitization / filtering allows for arbitrary JavaScript Injection in Mautic using the bounce management callback function. The values submitted i… |
CVE-2021-27909 | Medium | 6.3 | 2021-08-30 | For Mautic versions prior to 3.3.4/4.0.0, there is an XSS vulnerability on Mautic's password reset page where a vulnerable parameter, "bundle," in the URL coul… |
CVE-2021-27908 | Medium | 5.8 | 2021-03-23 | In all versions prior to Mautic 3.3.2, secret parameters such as database credentials could be exposed publicly by an authorized admin user through leveraging… |
CVE-2020-35129 | Critical | 9.0 | 2021-01-19 | Mautic before 3.2.4 is affected by stored XSS. An attacker with access to Social Monitoring, an application feature, could attack other users, including admini… |
CVE-2018-8092 | Critical | 9.8 | 2018-04-18 | Mautic before 2.13.0 allows CSV injection. |
CVE-2018-8071 | Medium | 6.1 | 2018-04-18 | Mautic before v2.13.0 has stored XSS via a theme config file. |
CVE-2018-10189 | High | 7.5 | 2018-04-17 | An issue was discovered in Mautic 1.x and 2.x before 2.13.0. It is possible to systematically emulate tracking cookies per contact due to tracking the contact… |
CVE-2017-1000506 | Medium | 6.1 | 2018-02-09 | Mautic version 2.11.0 and earlier contains a Cross Site Scripting (XSS) vulnerability in Company's name that can result in denial of service and execution of j… |
CVE-2017-1000490 | Medium | 6.5 | 2018-01-03 | Mautic versions 1.0.0 - 2.11.0 are vulnerable to allowing any authorized Mautic user session (must be logged into Mautic) to use the Filemanager to download an… |
CVE-2017-1000489 | High | 8.1 | 2018-01-03 | Mautic versions 2.0.0 - 2.11.0 with a SSO plugin installed could allow a disabled user to still login using email address |
CVE-2017-1000488 | Medium | 6.1 | 2018-01-03 | Mautic version 2.1.0 - 2.11.0 is vulnerable to an inline JS XSS attack when using Mautic forms on a Mautic landing page using GET parameters to pre-populate th… |
CVE-2017-1000046 | High | 7.5 | 2017-07-17 | Mautic 2.6.1 and earlier fails to set flags on session cookies |