Unspecified Automad vulnerabilities
- unspecified automad automad Password Reset Endpoint UserController.php requestPasswordResetToken response discrepancy 6.3 Medium
- marcantondahmen automad Automad Broken Access Control: unauthenticated exposure of administrator bcrypt password hashes and TOTP secrets via public API endpoint 7.5 High
- automad automad User Creation cross-site request forgery 4.3 Medium
- automad automad FileController.php import server-side request forgery 6.3 Medium
- automad automad Content Type FileCollectionController.php upload unrestricted upload 4.7 Medium
- automad automad Setting post.php cross site scripting 4.8 Medium
- automad automad Dashboard cross site scripting 3.5 Low