medium6.1
CVE-2023-47380
Cross-site Scripting in Admidio
Impact
Admidio v4.2.12 and below is vulnerable to Cross Site Scripting (XSS).
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | admidio/admidio | < 4.2.13 | 4.2.13 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Admidio | Admidio | Version 4.2.12 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- https://github.com/Admidio/admidio/releases/tag/v4.2.13
- https://www.admidio.org/intern/adm_program/modules/announcements/announcements.php?ann_uuid=714ead2b-1718-4251-a9a3-f1b0df12d60e&headline=Blog
- https://www.getastra.com/blog/security-audit/reflected-xss-vulnerability-in-admidio/
- https://github.com/advisories/GHSA-vm4p-gh82-xq96
- https://nvd.nist.gov/vuln/detail/CVE-2023-47380