Products: 1
Vulnerabilities: 9
Known Exploited: 0
0
Critical Level Threats
1
High Level Threats
5
Medium Level Threats
3
Low Level Threats
Vulnerabilities
100806040200
JanFebMarAprMayJunJulAugSepOctNovDec
Critical Level Threats
High Level Threats
Medium Level Threats
Low Level Threats
Products Security index
Actions
Items Per Page
Vulnerabilities
CVE-2026-19965
automad Password Reset Endpoint UserController.php requestPasswordResetToken response discrepancy
Last Modified: Aug 19, 2026
Published: Aug 17, 2026
CVE-2024-40111
A persistent (stored) cross-site scripting (XSS) vulnerability has been identified in Automad 2.0.0-alpha.4. This vulnerability enables an attacker to inject malicious JavaScript code into the template body. The injected code is stored within the flat file CMS and is executed in the browser of any user visiting the forum.
Last Modified: Apr 21, 2025
Published: Aug 23, 2024
CVE-2024-40400
An arbitrary file upload vulnerability in the image upload function of Automad v2.0.0 allows attackers to execute arbitrary code via a crafted file.
Last Modified: Jun 04, 2025
Published: Jul 19, 2024
CVE-2023-7038
automad User Creation cross-site request forgery
Last Modified: Nov 21, 2024
Published: Dec 21, 2023
CVE-2023-7037
automad FileController.php import server-side request forgery
Last Modified: Nov 21, 2024
Published: Dec 21, 2023
Items Per Page
