2 matches found
CVE-2021-43810 Cross-site Scripting (XSS) when redirect an url
Admidio is a free open source user management system for websites of organizations and groups. A cross-site scripting vulnerability is present in Admidio prior to version 4.0.12. The Reflected XSS vulnerability occurs because redirect.php does not properly validate the value of the url parameter...
8.8CVSS8.2AI score0.05784EPSS
SaveExploits0References4
CVE-2021-43810
CVE-2021-43810 : Admidio prior to 4.0.12 contains a Reflected XSS in redirect.php where the url parameter is not properly validated, enabling execution of malicious scripts in the victim’s browser. Several connected sources confirm this XSS vector and a patch was released in version 4.0.12 to rem...
8.8CVSS6.2AI score0.05784EPSS
SaveExploits0References4Affected Software1
20