Cross-site Scripting in Admidio

MEDIUM 6.1CVE-2023-47380 · GHSA-vm4p-gh82-xq96 · Published 22/11/2023 · updated 17/06/2026

In short

CVE-2023-47380 is a MEDIUM (CVSS 6.1) vulnerability affecting admidio/admidio, admidio (admidio).
Chance of exploitation in the next 30 days (EPSS): 0.70%, higher than 53.2% of all vulnerabilities.
Fix: update to 4.2.13 or later.

Package	Affected versions	Patched versions
admidio/admidio Packagist	`< 4.2.13`	`4.2.13`
admidio admidio	`= 4.2.12`	No fix yet

Admidio v4.2.12 and below is vulnerable to Cross Site Scripting (XSS).

NVD description

Admidio v4.2.12 and below is vulnerable to Cross Site Scripting (XSS).

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

Packagist

< 4.2.13

4.2.13

= 4.2.12

No fix yet

More vulnerabilities in admidio/admidio

See all →