CVE-2022-25774: Acquia Mautic

Medium severity, CVSS 5.4. EPSS: 0.4% chance of exploitation in the next 30 days.

Prior to the patched version, logged in users of Mautic are vulnerable to a self XSS vulnerability in the notifications within Mautic. Users could inject malicious code into the notification when saving Dashboards.

Affected products

• Acquia Mautic: before 4.4.12 (fixed in 4.4.12)

Published 2024-09-18. Last modified 2026-06-17.