TI-2018-05847 CVE-2018-8092 · GHSA-29v9-2fpx-j5g9
Mautic before 2.13.0 allows CSV injection.
Priority MEDIUM 45
Mautic before 2.13.0 allows CSV injection.
Mautic
Records49All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical7CVSS 9.0–10.0
CVSS high16CVSS 7.0–8.9
Exploited now
Mautic records in CISA KEVNo Mautic vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
9 records in Mautic · all components
TI-2020-17841 CVE-2020-35129 · GHSA-3px5-wjh3-9x6r
Mautic before 3.2.4 is affected by stored XSS.
Priority MEDIUM 41
Mautic before 3.2.4 is affected by stored XSS.
TI-2017-14698 CVE-2017-1000489 · GHSA-6x98-fx9j-7c78
Mautic versions 2.0.0 - 2.11.0 with a SSO plugin installed could allow a disabled user to…
Priority LOW 37
Mautic versions 2.0.0 - 2.11.0 with a SSO plugin installed could allow a disabled user to still login using email address
TI-2018-07222 CVE-2018-10189 · GHSA-vfxj-qg93-7wwc
An issue was discovered in Mautic 1.x and 2.x before 2.13.0.
Priority LOW 35
An issue was discovered in Mautic 1.x and 2.x before 2.13.0.
TI-2017-14388 CVE-2017-1000046 · GHSA-8255-qf34-44mp
Mautic 2.6.1 and earlier fails to set flags on session cookies
Priority LOW 35
Mautic 2.6.1 and earlier fails to set flags on session cookies
TI-2017-14699 CVE-2017-1000490 · GHSA-qpgw-2c72-4c89
Mautic versions 1.0.0 - 2.11.0 are vulnerable to allowing any authorized Mautic user…
Priority LOW 32
Mautic versions 1.0.0 - 2.11.0 are vulnerable to allowing any authorized Mautic user session (must be logged into Mautic) to use the Filemanager to download any file from the server that the web user has access to.
TI-2018-05838 CVE-2018-8071 · GHSA-5w74-jx7m-x6hv
Mautic before v2.13.0 has stored XSS via a theme config file.
Priority LOW 29
Mautic before v2.13.0 has stored XSS via a theme config file.
TI-2017-14714 CVE-2017-1000506 · GHSA-358v-cqjc-2pcq
Mautic version 2.11.0 and earlier contains a Cross Site Scripting (XSS) vulnerability in…
Priority LOW 29
Mautic version 2.11.0 and earlier contains a Cross Site Scripting (XSS) vulnerability in Company's name that can result in denial of service and execution of javascript code.
TI-2017-14697 CVE-2017-1000488 · GHSA-qjhr-c23f-w76q
Mautic version 2.1.0 - 2.11.0 is vulnerable to an inline JS XSS attack when using Mautic…
Priority LOW 29
Mautic version 2.1.0 - 2.11.0 is vulnerable to an inline JS XSS attack when using Mautic forms on a Mautic landing page using GET parameters to pre-populate the form.