CVE-2022-25774: 
PHP vulnerability analysis and mitigation

CVE-2022-25774 is a self XSS (Cross-Site Scripting) vulnerability affecting Mautic, an open-source marketing automation platform. The vulnerability was discovered in versions prior to 4.4.12, where logged-in users could be vulnerable to XSS attacks through notifications within the Mautic platform (GitHub Advisory).

The vulnerability is classified as a CWE-79 (Cross-site Scripting) issue with a CVSS v3.1 base score of 4.8 (Moderate). The attack vector is Network-based, with Low attack complexity, requiring High privileges and User interaction. The vulnerability allows users to inject malicious code into notifications when saving Dashboards (GitHub Advisory).

The vulnerability has a Changed scope with Low impact on both Confidentiality and Integrity, while having No impact on Availability. The successful exploitation could allow attackers to inject and execute malicious code in the context of other users' sessions (GitHub Advisory).

The vulnerability has been patched in Mautic version 4.4.12. Users are advised to update to this version or later as there are no alternative workarounds available (GitHub Advisory).