EUVD-2026-103308

Admidio from 5.0.0 before 5.0.16 contains an insecure direct object reference vulnerability in ForumService::saveTopic that allows authenticated members to modify other users' forum topics. Attackers can replace the topicuuid parameter in their own topicsave request, reusing their CSRF token, to...

CVE-2026-111912

Admidio versions 5.0.0 before 5.0.16 are vulnerable to an Insecure Direct Object Reference (IDOR) flaw within the ForumService::saveTopic() function. This vulnerability allows authenticated members to modify forum topics belonging to other users by replacing the topic_uuid parameter in a topic_sa...