Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 57
Reset filtersMautic vulnerable to Cross-site Scripting (XSS) - stored (edit form HTML field)
Mautic vulnerable to Improper Access Control in UI upgrade process
Mautic is vulnerable to XSS vulnerability
Mautic: MST-48 Server-Side Request Forgery in Asset section
Mautic Sensitive Data Exposure due to inadequate user permission settings
Mautic SQL Injection in dynamic Reports
Mautic vulnerable to Relative Path Traversal / Arbitrary File Deletion due to GrapesJS builder
Mautic vulnerable to cross-site scripting in notifications via saving Dashboards
Mautic vulnerable to stored cross-site scripting in description field
Cross-site Scripting vulnerability in Mautic's tracking pixel functionality
Mautic stored Cross-site Scripting (XSS)
Mautic stored Cross-site Scripting (XSS)
Mautic Cross Site Scripting (XSS) vulnerability
Sensitive Cookie Without HttpOnly and Secure Flag
Mautic Cross-Site Request Forgery (CSRF)
Improper regex in htaccess file
Use of a Broken or Risky Cryptographic Algorithm
XSS vulnerability on password reset page
Stored XSS vulnerability on Bounce Management Callback
XSS vulnerability on contacts view
XSS vulnerability on asset view
Mautic vulnerable to secret data exfiltration via symfony parameters
XSS in Mautic
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.