Mautic 漏洞列表

Mautic before 3.3.4 contains a cross-site scripting vulnerability on the password reset page in the bundle parameter of the URL. An attacker can inject arbitrary script, steal cookie-based authentication credentials, and/or launch other attacks.

Mautic before 3.3.4 contains a cross-site scripting vulnerability on the password reset page in the bundle parameter of the URL. An attacker can inject arbitrary script, steal cookie-based authentication credentials, and/or launch other attacks.

Mautic is susceptible to the Installation page exposure due to misconfiguration.

Upgrade.php page in Mautic is exposed.

Mautic 存在一个跨站脚本漏洞，该漏洞是由于应用程序从跟踪像素收集的用户元数据处理不当造成的。