Admidio vulnerable to Cross-site Scripting

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2023-3109 · ADVISORY
• admidio/admidio commit a7c211b · WEB
• admidio/admidio · PACKAGE
• huntr.dev/bounties/6fa6070e-8f7f-43ae-8a84-e36b28256123 · WEB

Lỗ hổng khác của admidio/admidio

• CVE-2026-53760TRUNG BÌNH 5.2Admidio is an open-source user management solution. In versions 5.0.11 and prior, the modules/plugins.php endpoint handles plugin installati…
• CVE-2026-47234TRUNG BÌNH 4.4Admidio is an open-source user management solution. Prior to version 5.0.10, when debug logging is enabled, `Session::setCookie()` logs full…
• CVE-2026-47233TRUNG BÌNH 6.5Admidio is an open-source user management solution. Version 5.0.9 added a missing `isAdministratorInventory()` gate to `case 'item_delete':`…
• CVE-2026-47232TRUNG BÌNH 4.3Admidio is an open-source user management solution. Prior to version 5.0.10, the sensitive `mode=export` action in `modules/sso/keys.php` ex…
• CVE-2026-47231CAO 8.1Admidio is an open-source user management solution. Prior to version 5.0.10, `modules/documents-files.php` gates state-changing modes by che…