[CVE-2020-35124] Unauthenticated XSS to Remote Code Execution Chain in Mautic < 3.2.4

CVE

CVE-2020-35124

Published

2021-01-24 19:13

Collected

2026-10-21 15:31

---
id: 10267
title: "[CVE-2020-35124] Unauthenticated XSS to Remote Code Execution Chain in Mautic < 3.2.4"
cve: CVE-2020-35124
source_domain: horizon3.ai
source_url: "https://horizon3.ai/attack-research/disclosures/unauthenticated-xss-to-remote-code-execution-chain-in-mautic-3-2-4/"
published_at: "2021-01-24T19:13:20Z"
tags: ["rce", "vulnerability-research", "xss", "horizon3", "cve-2020-35124"]
phying_url: "https://phying.com/item/10267"
lang: en
---

# [CVE-2020-35124] Unauthenticated XSS to Remote Code Execution Chain in Mautic < 3.2.4

## Summary

# Unauthenticated XSS to Remote Code Execution Chain in Mautic ` page. Below we dump the contents of the `/etc/passwd` file on the Mautic server. And upgrading to a reverse shell using a Python...

## Intelligence Metadata

- **Sources:** horizon3.ai
- **CVE:** CVE-2020-35124
- **Published:** 2021-01-24T19:13:20Z
- **Original:** https://horizon3.ai/attack-research/disclosures/unauthenticated-xss-to-remote-code-execution-chain-in-mautic-3-2-4/
- **Phying News:** https://phying.com/item/10267