CVE-2026-47233

Admidio is an open-source user management solution. Version 5.0.9 added a missing "isAdministratorInventory" gate to "case 'itemdelete':" in "modules/inventory.php". The same fix was not applied to the sibling "case 'fielddelete':" handler, which destroys an entire inventory field definition,...