CVE-2026-109327— Admidio 4.0.12 through 4.3.17 and 5.0.0 before 5.0.15 Reflected XSS via system/redirect.php
Quick assessment
Affected
Admidio admidio
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Admidio 4.0.12 至 4.3.17 版本以及 5.0.0 至 5.0.15 之前的版本中，system/redirect.php 存在一个反射型跨站脚本（XSS）漏洞。该漏洞允许未经身份验证的攻击者通过 URL 的 GET 参数注入 JavaScript 代码。此问题是由于对 CVE-2021-43810 的修复不完整所致。攻击者可以构造一个包含欺骗性 http:// 片段的 javascript: URL，该 URL 能够绕过验证，并在受害者点击重定向链接时，在 Admidio 应用的原始上下文中执行
Possible ATT&CK Techniques 2 AI
T1059 · Command and Scripting Interpreter T1189 · Drive-by Compromise
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-109327
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Admidio 4.0.12 through 4.3.17 and 5.0.0 before 5.0.15 Reflected XSS via system/redirect.php
Source: CVE Program / CVE List V5
Vulnerability Description
Admidio 4.0.12 through 4.3.17 and 5.0.0 before 5.0.15 contains a reflected cross-site scripting vulnerability in system/redirect.php that allows unauthenticated attackers to inject JavaScript via the url GET parameter, due to an incomplete fix for CVE-2021-43810. Attackers can craft a javascript: URL containing a decoy http:// segment that passes validation and executes script in the Admidio origin when victims click the redirect link.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-109327
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-109327
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-109327 (2)
Same Patch Batch · Admidio · 2026-10-12 · 3 CVEs total
| CVE-2026-109329 | 6.5 MEDIUM | Admidio 4.3.2 through 4.3.17 and 5.0.0 before 5.0.15 Cross-Organization Access Control Byp |
| CVE-2026-109328 | 6.1 MEDIUM | Admidio 5.0.0 before 5.0.15 Unauthenticated Stored XSS via Registration Name |
IV. Related Vulnerabilities
Same product: admidio
-
CVE-2026-109329
Admidio 4.3.2 through 4.3.17 and 5.0.0 before 5.0.15 Cross-O -
CVE-2026-109328
Admidio 5.0.0 before 5.0.15 Unauthenticated Stored XSS via R -
CVE-2026-53760
Admidio: CSRF on Plugin Install, Uninstall, and Update via U -
CVE-2026-82658
Admidio before 5.0.12 Broken Access Control via profile_func -
CVE-2026-82656
Admidio before 5.0.12 Path Traversal via Photo ZIP Download
Same vendor: Admidio
-
CVE-2026-109328
Admidio 5.0.0 before 5.0.15 Unauthenticated Stored XSS via R -
CVE-2026-109329
Admidio 4.3.2 through 4.3.17 and 5.0.0 before 5.0.15 Cross-O -
CVE-2026-53760
Admidio: CSRF on Plugin Install, Uninstall, and Update via U -
CVE-2026-82658
Admidio before 5.0.12 Broken Access Control via profile_func -
CVE-2026-82656
Admidio before 5.0.12 Path Traversal via Photo ZIP Download
Same weakness: CWE-79
-
CVE-2026-91159
Discourse: Stored oEmbed HTML injection via allowed iframe -
CVE-2026-89069
MOVEit Transfer Stored XSS Vulnerability in Ad Hoc Packages -
CVE-2026-60008
Gitea Jupyter notebook UI redress through CSS class injectio -
CVE-2026-110627
ClipBucket v5 through 5.5.3-#206 Reflected XSS via add_todo -
CVE-2026-110626
ClipBucket v5 through 5.5.3-#206 Reflected XSS via edit_lang
V. Comments for CVE-2026-109327
No comments yet