https://nmmorette.github.io/tags/mautic/Recent content in Mautic on Natan Maia MoretteHugoen-usWed, 03 Sep 2025 00:00:00 -0300https://nmmorette.github.io/posts/2025/09/cve-2025-9823-reflected-xss-in-leadaddleadtags-quick-add/Wed, 03 Sep 2025 00:00:00 -0300https://nmmorette.github.io/posts/2025/09/cve-2025-9823-reflected-xss-in-leadaddleadtags-quick-add/<div class="advisory-notice"> <p><strong>&#9888; Replicated advisory.</strong> This post reproduces an advisory originally researched and published under the <a href="https://www.cvehunters.com/" target="_blank" rel="noopener">CVE Hunters</a>. It is republished here for reference. The original disclosure followed coordinated vulnerability disclosure and the rules of the CVE Program.</p> <p>&#128279; <strong>Original advisory:</strong> <a href="https://www.cvehunters.com/p/cve-2025-9823/" target="_blank" rel="noopener">https://www.cvehunters.com/p/cve-2025-9823/</a><br>&#128203; <strong>CVE record:</strong> <a href="https://www.cve.org/CVERecord?id=CVE-2025-9823" target="_blank" rel="noopener">CVE-2025-9823</a></p> </div> <blockquote> <p><em>CVE Publication: <a href="https://www.cve.org/CVERecord?id=CVE-2025-9823">https://www.cve.org/CVERecord?id=CVE-2025-9823</a></em></p> </blockquote> <h2 id="vendor">Vendor</h2> <p style="text-align: justify;"> Mautic is an open-source marketing automation platform used worldwide. </p> <p><a href="https://mautic.org/">https://mautic.org/</a></p> <h2 id="affected-product-code-base">Affected Product Code Base</h2> <p>Affected versions:</p> <blockquote> <p>= 4.4.0, &lt; 4.4.17 = 5.0.0-alpha, &lt; 5.2.8 = 6.0.0-alpha, &lt; 6.0.5 Patched versions: 4.4.17, 5.2.8, 6.0.5</p>