Medium · 5.4 CVE-2021-37502 EUVD-2023-0770GHSA-q3c8-65q7-9v78

Cross site scripting in automad/automad

Published Feb 3, 2023 · Updated Mar 26, 2025 · Assigned by mitre

Description

Cross Site Scripting (XSS) vulnerability in automad 1.7.5 allows remote attackers to run arbitrary code via the user name field when adding a user.

Ecosystem	Package	Affected	Fixed	Record
Packagist	automad/automad	< 1.8.0	1.8.0	GHSA-q3c8-65q7-9v78