Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: admidio 5.0.15 Clear all filters
TI-2026-71145 CVE-2026-109329 · GHSA-h6qv-2m44-96j9

Cross-organization access control bypass in Admidio

Priority LOW 37

Admidio 4.3.2 through 4.3.17 and 5.0.0 before 5.0.15 contains a broken access control vulnerability that allows role administrators to assign users to roles in other organizations.

CVSS 4.0HIGH 8.5 Network High privileges No interaction EPSS 0.00285 Published 2026-10-12 Fixed in 5.0.15 CWE-639
TI-2026-71144 CVE-2026-109328 · GHSA-j47v-vx83-x99p

Stored cross-site scripting in Admidio registration name

Priority MEDIUM 57

Admidio 5.0.0 before 5.0.15 contains an unauthenticated stored cross-site scripting vulnerability in RegistrationPresenter.php, which inserts the raw FIRST_NAME registration value into an unencoded data-message attribute…

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.0024 Published 2026-10-12 Fixed in 5.0.15 CWE-79
TI-2026-71143 CVE-2026-109327 · GHSA-7p8w-m95g-69jq

Reflected cross-site scripting in Admidio redirect page

Priority MEDIUM 56

Admidio 4.0.12 through 4.3.17 and 5.0.0 before 5.0.15 contains a reflected cross-site scripting vulnerability in system/redirect.php that allows unauthenticated attackers to inject JavaScript via the url GET parameter, d…

CVSS 4.0MEDIUM 5.1 Network No auth User interaction EPSS 0.00257 Published 2026-10-12 Fixed in 5.0.15 CWE-79