CVE-2024-40111

A persistent (stored) cross-site scripting (XSS) vulnerability has been identified in Automad 2.0.0-alpha.4

Medium · published August 23, 2024

CVSS v3.1
4.8
EPSS
1%
Percentile
57.2
In the wild
Unconfirmed
What it is

A persistent (stored) cross-site scripting (XSS) vulnerability has been identified in Automad 2.0.0-alpha.4. This vulnerability enables an attacker to inject malicious JavaScript code into the template body. The injected code is stored within the flat file CMS and is executed in the browser of any user visiting the forum.

The record
Technical detail
CVSS v3.1
4.8 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00833 · 57.2th percentile
Published
2024-08-23T00:00Z
EPSS history
Timeline
  • 23 AUG 00:00Z
    A persistent (stored) cross-site scripting (XSS) vulnerability has been identified in Automad 2.0.0-alpha.4
    cvelistv5