CVE-2023-47380
Admidio v4.2.12 and below is vulnerable to Cross Site Scripting (XSS).
- Update to 4.2.13
Published Updated
PatchFirst · Latest vulnerabilities
admidio/admidio vulnerabilities · Page 3
Vulnerabilities published for admidio/admidio in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerabilities: 50
Insufficient Session Expiration in admidio/admidio
Insufficient Session Expiration in GitHub repository admidio/admidio prior to 4.2.11.
- Update to 4.2.11
Published UpdatedUnrestricted Upload of File with Dangerous Type in admidio/admidio
Unrestricted Upload of File with Dangerous Type in GitHub repository admidio/admidio prior to 4.2.10.
- Update to 4.2.10
Published UpdatedImproper Access Control in admidio/admidio
Improper Access Control in GitHub repository admidio/admidio prior to 4.2.9.
- Update to 4.2.9
Published UpdatedImproper Access Control in admidio/admidio
Improper Access Control in GitHub repository admidio/admidio prior to 4.2.9.
- Update to 4.2.9
Published UpdatedImproper Neutralization of Formula Elements in a CSV File in admidio/admidio
Improper Neutralization of Formula Elements in a CSV File in GitHub repository admidio/admidio prior to 4.2.9.
- Update to 4.2.9
Published UpdatedCross-site Scripting (XSS) - Stored in admidio/admidio
Cross-site Scripting (XSS) - Stored in GitHub repository admidio/admidio prior to 4.2.8.
- Update to 4.2.8
Published UpdatedCVE-2022-23896
Admidio 4.1.2 version is affected by stored cross-site scripting (XSS).
- Update to 4.1.3
Published UpdatedInsufficient Session Expiration in admidio/admidio
Insufficient Session Expiration in GitHub repository admidio/admidio prior to 4.1.9.
- Update to 4.1.9
Published UpdatedCVE-2017-8382
admidio 3.2.8 has CSRF in adm_program/modules/members/members_function.php with an impact of deleting arbitrary user accounts.
- Update to 4.1-Beta.1
Published Updated
Check your server
Check your installed stack and versions against the current vulnerability feeds.