CVE-2021-43810

CVE-2021-43810 : Admidio prior to 4.0.12 contains a Reflected XSS in redirect.php where the url parameter is not properly validated, enabling execution of malicious scripts in the victim’s browser. Several connected sources confirm this XSS vector and a patch was released in version 4.0.12 to rem...

CVE-2021-43810 Cross-site Scripting (XSS) when redirect an url

Admidio is a free open source user management system for websites of organizations and groups. A cross-site scripting vulnerability is present in Admidio prior to version 4.0.12. The Reflected XSS vulnerability occurs because redirect.php does not properly validate the value of the url parameter...