{"action":"Upgrade mautic/core to 4.3.0 or later.","affected":[{"fixed":"4.3.0","introduced":"0"}],"component":"mautic/core","cve_ids":["CVE-2022-25772"],"ecosystem":"Packagist","epss":0.63036,"exploited":false,"fixed_versions":["4.3.0"],"ghsa_id":"GHSA-pjpc-87mp-4332","id":"tcs_01M5KF6FDVFRK8C9T9THDBPK8F","modified_at":"2026-07-08T06:27:57.011563393Z","published_at":"2022-05-25T22:36:33Z","references":["https://osv.dev/vulnerability/GHSA-pjpc-87mp-4332","https://github.com/mautic/mautic/security/advisories/GHSA-pjpc-87mp-4332","https://nvd.nist.gov/vuln/detail/CVE-2022-25772","https://github.com/mautic/mautic/commit/462eb596027fd949efbf9ac5cb2b376805e9d246","https://github.com/mautic/mautic","https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-00847.html"],"severity":{"label":"critical","score":9.6},"sources":[{"source":"osv","source_id":"GHSA-pjpc-87mp-4332","url":"https://osv.dev/vulnerability/GHSA-pjpc-87mp-4332"}],"summary":"Cross-site Scripting vulnerability in Mautic's tracking pixel functionality"}