CVE-2021-27915: Acquia Mautic

Critical severity, CVSS 9.0. EPSS: 0.6% chance of exploitation in the next 30 days.

Prior to the patched version, there is an XSS vulnerability in the description fields within the Mautic application which could be exploited by a logged in user of Mautic with the appropriate permissions. This could lead to the user having elevated access to the system.

Affected products

• Acquia Mautic: from 1.0.0, before 4.4.12 (fixed in 4.4.12); version 1.0.0 only

Published 2024-09-17. Last modified 2026-06-17.