An arbitrary file upload vulnerability in the image upload function of Automad v2.0.0 allows attackers to execute arbitrary code via a crafted file.
CWE-434 Unrestricted Upload of File with Dangerous Type