๐Ÿ” CVE Alert

CVE-2023-3109

MEDIUM 6.3

Cross-site Scripting (XSS) - Stored in admidio/admidio

CVSS Score
6.3
EPSS Score
0.0%
EPSS Percentile
0th

Cross-site Scripting (XSS) - Stored in GitHub repository admidio/admidio prior to 4.2.8.

CWE CWE-79
Vendor admidio
Product admidio/admidio
Published Jun 5, 2023
Last Updated Jan 8, 2025
Stay Ahead of the Next One

Get instant alerts for admidio admidio/admidio

Be the first to know when new medium vulnerabilities affecting admidio admidio/admidio are published โ€” delivered to Slack, Telegram or Discord.

Get Free Alerts โ†’ Free ยท No credit card ยท 60 sec setup

CVSS v3 Breakdown

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Affected Versions

admidio / admidio/admidio
unspecified < 4.2.8

References

NVD โ†— CVE.org โ†— EPSS Data โ†—
huntr.dev: https://huntr.dev/bounties/6fa6070e-8f7f-43ae-8a84-e36b28256123 github.com: https://github.com/admidio/admidio/commit/a7c211b835cafe1158932fbfcff9e5552e57510a