CVE-2022-1536

CVE-2022-1536 affects automad up to v1.10.9, targeting the Dashboard via a cross-site scripting (XSS) vulnerability. The issue stems from manipulating the title argument with input like Home, enabling an attacker to inject scripts. Public exploit details are noted, and the attack is described as ...

CVE-2022-1536 automad Dashboard cross site scripting

A vulnerability has been found in automad up to 1.10.9 and classified as problematic. This vulnerability affects the Dashboard. The manipulation of the argument title with the input Homealert"home" leads to a cross site scripting. The attack can be initiated remotely but requires an authenticatio...

CVE-2022-1536: Improper Neutralization of Input During Web Page Generation

A vulnerability has been found in automad up to 1.10.9 and classified as problematic. This vulnerability affects the Dashboard. The manipulation of the argument title with the input Home leads to a cross site scripting. The attack can be initiated remotely but requires an authentication. The...

PT-2022-13938

Name of the Vulnerable Software and Affected Versions automad versions up to 1.10.9 Description A problematic issue has been found in the Dashboard, where the manipulation of the title argument with a specific input, such as Homealert"home", leads to a cross-site scripting issue. The attack can b...

automad 跨站脚本漏洞

automad is a flat file content management system and template engine. automad version 1.10.9 and prior versions contain a cross-site scripting vulnerability that can be exploited by attackers to cause cross-site scripting attacks...