Skip to content
CVE PROGRAM SOURCE RECORD9.6 Critical

CVE-2022-25772

A cross-site scripting (XSS) vulnerability in the web tracking component of Mautic before 4.3.0 allows remote attackers to inject executable javascript

Description

A cross-site scripting (XSS) vulnerability in the web tracking component of Mautic before 4.3.0 allows remote attackers to inject executable javascript

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Mautic Mautic

  • unspecified to < 4.3.0affected

References