CVE-2021-43810

    Dashboard / Vulnerabilities / CVE-2021-43810

    CVE-2021-43810

    Published: 7 Dec 2021Last Modified: 7 Aug 2026

    Summary:

    Details: Admidio is a free open source user management system for websites of organizations and groups. A cross-site scripting vulnerability is present in Admidio prior to version 4.0.12. The Reflected XSS vulnerability occurs because redirect.php does not properly validate the value of the url parameter. Through this vulnerability, an attacker is capable to execute malicious scripts. This issue is patched in version 4.0.12.

    References: https://github.com/Admidio/admidio/security/advisories/GHSA-3qgf-qgc3-42hh, https://github.com/Admidio/admidio/commit/c043267d362f7813543cc2785119bf3e3e54fe21, https://github.com/Admidio/admidio/commit/fcb0609abc1d2f65bc1377866bd678e5d891404b, https://github.com/Admidio/admidio/releases/tag/v4.0.12

    Affected packages

    Package

    Name:

    Purl:

    Affected ranges

    Type: GIT

    Events:

    Introduced- 0
    Fixed -470f534768f47e3bb506ec3c66a9ddecc9a41cf5

    Affected versions

    v4.1-Beta.2

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    CVE-2021-43810 | CVE-DB