A
dmidio v4.2.12 and below is vulnerable to Cross Site Scripting (XSS).
References
| Link | Resource |
|---|---|
| https://github.com/Admidio/admidio/releases/tag/v4.2.13 | Release Notes |
| https://www.admidio.org/intern/adm_program/modules/announcements/announcements.php?ann_uuid=714ead2b-1718-4251-a9a3-f1b0df12d60e&headline=Blog | Release Notes |
| https://www.getastra.com/blog/security-audit/reflected-xss-vulnerability-in-admidio/ | Exploit Patch Third Party Advisory |
| https://github.com/Admidio/admidio/releases/tag/v4.2.13 | Release Notes |
| https://www.admidio.org/intern/adm_program/modules/announcements/announcements.php?ann_uuid=714ead2b-1718-4251-a9a3-f1b0df12d60e&headline=Blog | Release Notes |
| https://www.getastra.com/blog/security-audit/reflected-xss-vulnerability-in-admidio/ | Exploit Patch Third Party Advisory |
Configurations
History
21 Nov 2024, 08:30
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://github.com/Admidio/admidio/releases/tag/v4.2.13 - Release Notes | |
| References | () https://www.admidio.org/intern/adm_program/modules/announcements/announcements.php?ann_uuid=714ead2b-1718-4251-a9a3-f1b0df12d60e&headline=Blog - Release Notes | |
| References | () https://www.getastra.com/blog/security-audit/reflected-xss-vulnerability-in-admidio/ - Exploit, Patch, Third Party Advisory |
Information
Published : 2023-11-22 15:15
Updated : 2024-11-21 08:30
NVD link : CVE-2023-47380
Mitre link : CVE-2023-47380
CVE.ORG link : CVE-2023-47380
JSON object : View
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')