CVE-2022-1536

CVE-2022-1536 is a cross-site scripting (XSS) vulnerability affecting automad versions up to 1.10.9, specifically within the Dashboard component. An authenticated attacker can inject malicious script by manipulating the 'title' argument, leading to client-side script execution. This medium-severity vulnerability (CVSS 5.4) requires user interaction and authentication for exploitation, with potential for limited confidentiality and integrity impact. While exploit details are publicly disclosed, there is no evidence of active exploitation, nor are there readily available Metasploit or Nuclei modules, and it has received minimal community discussion or media coverage.