CVE-2021-43810: Cross-site Scripting (XSS) when redirect an url
Admidio is a free open source user management system for websites of organizations and groups. A cross-site scripting vulnerability is present in Admidio prior to version 4.0.12. The Reflected XSS vulnerability occurs because redirect.php does not properly validate the value of the url parameter. Through this vulnerability, an attacker is capable to execute malicious scripts. This issue is patched in version 4.0.12.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2021-43810?
CVE-2021-43810 is a cross-site scripting vulnerability in Admidio prior to version 4.0.12.
What is the severity of CVE-2021-43810?
The severity of CVE-2021-43810 is high, with a CVSS score of 6.1.
How does CVE-2021-43810 impact Admidio?
CVE-2021-43810 allows an attacker to inject malicious scripts into web pages viewed by users of Admidio, potentially leading to unauthorized access or theft of sensitive information.
How can I fix CVE-2021-43810?
To fix CVE-2021-43810, users should upgrade to Admidio version 4.0.12 or later, which includes a patch for the vulnerability.
What is CWE-79?
CWE-79 is a common weakness enumeration category for cross-site scripting vulnerabilities.