Skip to content
CVE PROGRAM SOURCE RECORD3.5 Low

CVE-2024-47836

Admidio vulnerable to HTML Injection In The Messages Section

Description

Admidio is an open-source user management solution. Prior to version 4.3.12, an unsafe deserialization vulnerability allows any unauthenticated user to execute arbitrary code on the server. Version 4.3.12 fixes this issue.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Admidio admidio

  • < 4.3.12affected

References