https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-09T19:23:01.637059+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-186067 EUVD-2026-186067 2026-10-09T19:23:01.639498+00:00 EUVD-2026-186067 https://cve.radiocsirt.org/vuln/fkie_cve-2021-27915 fkie_cve-2021-27915 2026-10-09T19:23:01.639529+00:00

Prior to the patched version, there is an XSS vulnerability in the description fields within the Mautic application which could be exploited by a logged in user of Mautic with the appropriate permissions.

This could lead to the user having elevated access to the system.

 https://cve.radiocsirt.org/vuln/ghsa-2rc5-2755-v422 GHSA-2rc5-2755-v422 — Mautic vulnerable to stored cross-site scripting in description field 2026-10-09T19:23:01.639561+00:00

Affected: Packagist: mautic/core

### Impact Prior to the patched version, there is an XSS vulnerability in the description fields within the Mautic application which could be exploited by a logged in user of Mautic with the appropriate permissions.

This could lead to the user having elevated access to the system.

### Patches Update to 4.4.12

### Workarounds None

### References - https://owasp.org/www-project-top-ten/2017/A7_2017-Cross-Site_Scripting_(XSS) - https://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/07-Input_Validation_Testing/02-Testing_for_Stored_Cross_Site_Scripting

If you have any questions or comments about this advisory:

Email us at [security@mautic.org](mailto:security@mautic.org)

 https://cve.radiocsirt.org/vuln/gsd-2021-27915 gsd-2021-27915 2026-10-09T19:23:01.639591+00:00 gsd-2021-27915