CVE-2021-43810

Admidio is a free open source user management system for websites of organizations and groups. A cross-site scripting vulnerability is present in Admidio prior to version 4.0.12. The Reflected XSS vulnerability occurs because redirect.php does not properly validate the value of the url parameter. Through this vulnerability, an attacker is capable to execute malicious scripts. This issue is patched in version 4.0.12.

• CWE-79

• https://github.com/Admidio/admidio/commit/c043267d362f7813543cc2785119bf3e3e54fe21Patch, Third Party Advisory
• https://github.com/Admidio/admidio/commit/fcb0609abc1d2f65bc1377866bd678e5d891404bPatch, Third Party Advisory
• https://github.com/Admidio/admidio/releases/tag/v4.0.12Patch, Release Notes, Third Party Advisory
• https://github.com/Admidio/admidio/security/advisories/GHSA-3qgf-qgc3-42hhThird Party Advisory
• https://github.com/Admidio/admidio/commit/c043267d362f7813543cc2785119bf3e3e54fe21Patch, Third Party Advisory
• https://github.com/Admidio/admidio/commit/fcb0609abc1d2f65bc1377866bd678e5d891404bPatch, Third Party Advisory
• https://github.com/Admidio/admidio/releases/tag/v4.0.12Patch, Release Notes, Third Party Advisory
• https://github.com/Admidio/admidio/security/advisories/GHSA-3qgf-qgc3-42hhThird Party Advisory

Published

Dec 7, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-43805Solidus is a free, open-source ecommerce platform built on R…7.5
• CVE-2021-43806Tuleap is a Libre and Open Source tool for end to end tracea…8.8
• CVE-2021-43807Opencast is an Open Source Lecture Capture & Video Managemen…6.5
• CVE-2021-43808Laravel is a web application framework. Laravel prior to ver…6.1
• CVE-2021-43809`Bundler` is a package for managing application dependencies…7.3
• CVE-2021-4381The uListing plugin for WordPress is vulnerable to authoriza…9.8
• CVE-2021-43811Sockeye is an open-source sequence-to-sequence framework for…7.8
• CVE-2021-43812The Auth0 Next.js SDK is a library for implementing user aut…6.1
• CVE-2021-43813Grafana is an open-source platform for monitoring and observ…4.3
• CVE-2021-43814Rizin is a UNIX-like reverse engineering framework and comma…7.8
• CVE-2021-43815Grafana is an open-source platform for monitoring and observ…4.3
• CVE-2021-43816containerd is an open source container runtime. On installat…9.1