3.3.4

DATE	CVE	VULNERABILITY TITLE	RISK
2022-06-20	CVE-2022-25772	Cross-site Scripting vulnerability in Acquia Mautic A cross-site scripting (XSS) vulnerability in the web tracking component of Mautic before 4.3.0 allows remote attackers to inject executable javascript network low complexity acquia CWE-79	6.1
2022-06-01	CVE-2021-27914	Cross-site Scripting vulnerability in Acquia Mautic A cross-site scripting (XSS) vulnerability in the installer component of Mautic before 4.3.0 allows admins to inject executable javascript network acquia CWE-79	3.5