Riskcovery

CVE-2022-1536

automad Dashboard cross site scripting

State
Published
Severity
3.5 Low
Published
Apr 29, 2022
Updated
Apr 15, 2025
Reserved
Apr 29, 2022

Read the record on cve.org

Description

A vulnerability has been found in automad up to 1.10.9 and classified as problematic. This vulnerability affects the Dashboard. The manipulation of the argument title with the input Home</title><script>alert("home")</script><title> leads to a cross site scripting. The attack can be initiated remotely but requires an authentication. The exploit details have disclosed to the public and may be used.

Scores

CVSSScoreVectorSource
3.13.5 LowCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:NVulDB

Weaknesses

Affected Products

ProductVersions
automadunspecified
  • 1.10.0Affected
  • 1.10.1Affected
  • 1.10.2Affected
  • 1.10.3Affected
  • 1.10.4Affected
  • 1.10.5Affected
  • 1.10.6Affected
  • 1.10.7Affected
  • 1.10.8Affected
  • 1.10.9Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.