Lucene search
GoogleOSV:GHSA-G8H2-J9PM-4XX2HistoryAug 23, 2024 - 9:30 p.m.
Automad Cross-site Scripting vulnerability
2024-08-2321:30:42
Google
osv.dev
3
automad
cross-site scripting
vulnerability
javascript
flat file cms
browser
A persistent (stored) cross-site scripting (XSS) vulnerability has been identified in Automad 2.0.0-alpha.4. This vulnerability enables an attacker to inject malicious JavaScript code into the template body. The injected code is stored within the flat file CMS and is executed in the browser of any user visiting the forum.
Related
cvelist
cvelist
CVE-2024-40111
2024-08-23 00:00:00
veracode
veracode
Cross-site Scripting (XSS)
2024-08-26 07:12:57
nvd
nvd
CVE-2024-40111
2024-08-23 21:15:07
vulnrichment
vulnrichment
CVE-2024-40111
2024-08-23 00:00:00
github
github
Automad Cross-site Scripting vulnerability
2024-08-23 21:30:42
cve
cve
CVE-2024-40111
2024-08-23 21:15:07