References https://github.com/mautic/mautic/security/advisories/GHSA-pjpc-87mp-4332 https://github.com/advisories/GHSA-pjpc-87mp-4332 https://www.fortiguard.com/encyclopedia/ips/51688 https://feedly.com/cve/CVE-2022-25772 https://autoupdate.ngfw.forcepoint.com/download/dynup/sgpkg-1983-SUMMARY.html https://www.anquanke.com/post/id/229544
Related VulnerabilitiesPoCCVE-2021-27909: Mautic <3.3.4 - Cross-Site ScriptingPoCCVE-2023-0334: ShortPixel Adaptive Images < 3.6.3 - Cross Site ScriptingPoCquantserve-pixel-csp-bypass: Content-Security-Policy Bypass - Quantserve PixelPoCmautic-installer: Mautic Installer ExposurePoCunauth-mautic-upgrade: Unauthenticated Mautic Upgrade.php ExposurePoCshortpixel-image-optimizer-xss: WordPress ShortPixel Image Optimizer <4.22.10 - Cross-Site Scriptingpixelimity 注入漏洞(CVE-2025-3014)NightWolf Penetration Testing Tracking 2.1.4不安全的直接对象引用漏洞1000 Projects Attendance Tracking Management System 注入漏洞WordPress plugin Tracking Code Manager 跨站脚本漏洞SourceCodester Tracking Monitoring Management System SQL注入漏洞华磊科技物流系统 getOrderTrackingNumber SQL注入漏洞