Cross-site Scripting in Admidio

Description

References

• nvd.nist.gov/vuln/detail/CVE-2023-47380 · ADVISORY
• Admidio/admidio · WEB
• Admidio/admidio release v4.2.13 · WEB
• admidio.org/intern/adm_program/modules/announcements/announcements.php · WEB
• getastra.com/blog/security-audit/reflected-xss-vulnerability-in-admidio · WEB
• getastra.com/blog/security-audit/reflected-xss-vulnerability-in-admidio · Exploit

Mais vulnerabilidades de admidio/admidio

• CVE-2026-53760MÉDIO 5.2Admidio is an open-source user management solution. In versions 5.0.11 and prior, the modules/plugins.php endpoint handles plugin installati…
• CVE-2026-47234MÉDIO 4.4Admidio is an open-source user management solution. Prior to version 5.0.10, when debug logging is enabled, `Session::setCookie()` logs full…
• CVE-2026-47233MÉDIO 6.5Admidio is an open-source user management solution. Version 5.0.9 added a missing `isAdministratorInventory()` gate to `case 'item_delete':`…
• CVE-2026-47232MÉDIO 4.3Admidio is an open-source user management solution. Prior to version 5.0.10, the sensitive `mode=export` action in `modules/sso/keys.php` ex…
• CVE-2026-47231ALTO 8.1Admidio is an open-source user management solution. Prior to version 5.0.10, `modules/documents-files.php` gates state-changing modes by che…