Описание
Admidio is a free open source user management system for websites of organizations and groups. A cross-site scripting vulnerability is present in Admidio prior to version 4.0.12. The Reflected XSS vulnerability occurs because redirect.php does not properly validate the value of the url parameter. Through this vulnerability, an attacker is capable to execute malicious scripts. This issue is patched in version 4.0.12.
Ссылки
- PatchThird Party Advisory
- PatchThird Party Advisory
- PatchRelease NotesThird Party Advisory
- Third Party Advisory
- PatchThird Party Advisory
- PatchThird Party Advisory
- PatchRelease NotesThird Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 4.0.12 (исключая)
cpe:2.3:a:admidio:admidio:*:*:*:*:*:*:*:*
EPSS
Процентиль: 98%
0.62973
Средний
8.8 High
CVSS3
6.1 Medium
CVSS3
4.3 Medium
CVSS2
Дефекты
CWE-79
EPSS
Процентиль: 98%
0.62973
Средний
8.8 High
CVSS3
6.1 Medium
CVSS3
4.3 Medium
CVSS2
Дефекты
CWE-79