All vulnerabilities

Servers and applications

CVE-2025-9823

Reflected XSS in lead:addLeadTags - Quick Add

Severity
Medium 4.8
Published
3 Sept 2025
Last changed
3 Sept 2025
Added to UpHeron
3 Nov 2026
Fixed in
4.4.17, 5.2.8, 6.0.5
Also known as
GHSA-9v8p-m85m-f7mm
Sources
Project advisories (GitHub)

Affected software

SoftwareAffected versions
MauticServers and applications · github:mautic/mautic
  • From 4.4.0 before 4.4.17
  • From 5.0.0-alpha before 5.2.8
  • From 6.0.0-alpha before 6.0.5

References