Acquia Mautic any version

Remote Code Execution & File Deletion in Asset Uploads

A cross-site scripting (XSS) vulnerability in the web tracking component of Mautic before 4.3.0 allows remote attackers to inject executable javascript

A cross-site scripting (XSS) vulnerability in the forms component of Mautic before 3.2.4 allows remote attackers to inject executable JavaScript via mautic[return] (a different attack method than CVE-2020-35124, but also related to the Referer concept).

A cross-site scripting (XSS) vulnerability in the assets component of Mautic before 3.2.4 allows remote attackers to inject executable JavaScript through the Referer header of asset downloads.

Improper regex in htaccess file

Mautic before 3.2.4 is affected by stored XSS. An attacker with permission to manage companies, an application feature, could attack other users, including administrators. For example, by loading an externally crafted JavaScript file, an attacker could eventually perform actions as the target user. These actions include changing the user passwords, altering user or email addresses, or adding a new administrator to the system.

XSS Cross-site Scripting Stored (XSS) - Description field

SQL Injection in Contact Activity API Sorting

XSS vulnerability on contacts view

Sensitive Data Exposure due to inadequate user permission settings

Stored XSS vulnerability on Bounce Management Callback

Relative Path Traversal / Arbitrary File Deletion in Mautic (GrapesJS Builder)

Insufficient authentication in upgrade flow

Improper Authorization in Reporting API

A cross-site scripting (XSS) vulnerability in the installer component of Mautic before 4.3.0 allows admins to inject executable javascript

XSS in contact tracking and page hits report

SQL Injection in dynamic Reports

XSS vulnerability on asset view

Improper Access Control in UI upgrade process

Server-Side Request Forgery in Asset section

XSS vulnerability on password reset page

XSS in contact/company tracking (no authentication)

In all versions prior to Mautic 3.3.2, secret parameters such as database credentials could be exposed publicly by an authorized admin user through leveraging Symfony parameter syntax in any of the free text fields in Mautic’s configuration that are used in publicly facing parts of the application.

Relative Path Traversal in assets file upload

XSS in Notifications via saving Dashboards

Cross-site Scripting (XSS) - stored (edit form HTML field)

Segment cloning doesn't have a proper permission check

Use of a Broken or Risky Cryptographic Algorithm