1. Home
  2. CVE Database
  3. CVE-2022-25774
MEDIUM · 4.8

CVE-2022-25774

Prior to the patched version, logged in users of Mautic are vulnerable to a self XSS vulnerability in the notifications within Mautic. Users could inject malicious code into the notification when sav...

Vulnerability Description

Prior to the patched version, logged in users of Mautic are vulnerable to a self XSS vulnerability in the notifications within Mautic. Users could inject malicious code into the notification when saving Dashboards.

CVSS Score

4.8

MEDIUM

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality
LOW
Integrity
LOW
Availability
NONE

Affected Products

VendorProductVersions
AcquiaMautic< 4.4.12

Related Weaknesses (CWE)

CWE-79

References

FAQ

What is CVE-2022-25774?

CVE-2022-25774 is a vulnerability with a CVSS score of 4.8 (MEDIUM). Prior to the patched version, logged in users of Mautic are vulnerable to a self XSS vulnerability in the notifications within Mautic. Users could inject malicious code into the notification when sav...

How severe is CVE-2022-25774?

CVE-2022-25774 has been rated MEDIUM with a CVSS base score of 4.8/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2022-25774?

Check the references section above for vendor advisories and patch information. Affected products include: Acquia Mautic.