Knadh Listmonk vulnerabilities
- knadh listmonk listmonk: SQL Injection in `/api/subscribers/export` bypasses table access control, leaking admin password hashes and SMTP credentials 5.5 Medium
- knadh listmonk listmonk: Broken Access Control in CSV Import (Unauthorized List Assignment) 5.4 Medium
- knadh listmonk listmonk: Active sessions remain valid after password reset and password change 7.1 High
- knadh listmonk listmonk Vulnerable to Stored XSS Leading to Admin Account Takeover 5.4 Medium
- knadh listmonk listmonk Vulnerable to CSRF to XSS Chain That Can Lead to Admin Account Takeover 8.6 High
- knadh listmonk listmonk's Sprig template Injection vulnerability leads to reading of Environment Variable for low privilege user 9.1 Critical