Mautic Self XSS Vulnerability
CVE-2022-25774
5.4MEDIUM
What is CVE-2022-25774?
Logged-in users of Mautic can exploit a self XSS vulnerability due to insufficient input validation within the notification feature. This allows attackers to inject custom scripts when saving dashboards, potentially leading to unauthorized actions or data breaches. Proper security measures and timely updates are essential to mitigate this risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.
Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.
Affected Version(s)
Mautic < 4.4.12
References
CVSS V3.1
Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed
Timeline
Vulnerability published
Vulnerability Reserved
Credit
Vautia
Lenon Leite
Zdeno Kuzmany
John Linhart
