Cross site scripting

Cross Site Scripting XSS vulnerability in automad 1.7.5 allows remote attackers to run arbitrary code via the user name field when adding a user...

PT-2023-12325 · Automad · Automad

Name of the Vulnerable Software and Affected Versions: automad version 1.7.5 Description: A Cross Site Scripting XSS issue allows remote attackers to run arbitrary code via the user name field when adding a user. Recommendations: For automad version 1.7.5, update to a version that contains a fix...

CVE-2021-37502

Cross Site Scripting XSS vulnerability in automad 1.7.5 allows remote attackers to run arbitrary code via the user name field when adding a user...

automad 跨站脚本漏洞

automad is a flat file content management system and template engine. A security vulnerability exists in automad version 1.7.5. An attacker can exploit this vulnerability to execute arbitrary code via the username field when adding a user...

CVE-2021-37502: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in automad 1.7.5 allows remote attackers to run arbitrary code via the user name field when adding a user...

CVE-2021-37502

Cross Site Scripting XSS vulnerability in automad 1.7.5 allows remote attackers to run arbitrary code via the user name field when adding a user...

CVE-2021-37502

CVE-2021-37502 concerns automad 1.7.5. The vulnerability is a Cross-Site Scripting (XSS) flaw in the user-creation flow, exploitable via the username field when adding a new user. The root cause appears to be insufficient input validation/escaping in accounts.php, allowing injected JavaScript to ...

automad cross-site scripting vulnerability

automad is a flat file content management system and template engine. automad version 1.10.9 and prior versions contain a cross-site scripting vulnerability that can be exploited by attackers to cause cross-site scripting attacks...

CVE-2022-1536

A vulnerability has been found in automad up to 1.10.9 and classified as problematic. This vulnerability affects the Dashboard. The manipulation of the argument title with the input Homealert"home" leads to a cross site scripting. The attack can be initiated remotely but requires an authenticatio...

Cross site scripting

A vulnerability has been found in automad up to 1.10.9 and classified as problematic. This vulnerability affects the Dashboard. The manipulation of the argument title with the input Homealert"home" leads to a cross site scripting. The attack can be initiated remotely but requires an authenticatio...

CVE-2022-1536 automad Dashboard cross site scripting

A vulnerability has been found in automad up to 1.10.9 and classified as problematic. This vulnerability affects the Dashboard. The manipulation of the argument title with the input Homealert"home" leads to a cross site scripting. The attack can be initiated remotely but requires an authenticatio...

CVE-2022-1536 automad Dashboard cross site scripting

A vulnerability has been found in automad up to 1.10.9 and classified as problematic. This vulnerability affects the Dashboard. The manipulation of the argument title with the input Homealert"home" leads to a cross site scripting. The attack can be initiated remotely but requires an authenticatio...

CVE-2022-1536

CVE-2022-1536 affects automad up to v1.10.9, targeting the Dashboard via a cross-site scripting (XSS) vulnerability. The issue stems from manipulating the title argument with input like Home, enabling an attacker to inject scripts. Public exploit details are noted, and the attack is described as ...

CVE-2022-1536 automad Dashboard cross site scripting

A vulnerability has been found in automad up to 1.10.9 and classified as problematic. This vulnerability affects the Dashboard. The manipulation of the argument title with the input Homealert"home" leads to a cross site scripting. The attack can be initiated remotely but requires an authenticatio...

CVE-2022-1536: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in automad up to 1.10.9 and classified as problematic. This vulnerability affects the Dashboard. The manipulation of the argument title with the input Home leads to a cross site scripting. The attack can be initiated remotely but requires an authentication. The...

automad 跨站脚本漏洞

automad is a flat file content management system and template engine. automad version 1.10.9 and prior versions contain a cross-site scripting vulnerability that can be exploited by attackers to cause cross-site scripting attacks...