https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 01:58:13 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-343674 EUVD-2026-343674 https://cve.radiocsirt.org/vuln/euvd-2026-343674 https://cve.radiocsirt.org/vuln/fkie_cve-2026-69093 <p>Admidio before 5.0.11 does not validate the adm_csrf_token in modules/category-report/preferences.php, which performs persistent Category Report configuration changes based on GET parameters (delete and copy). An attacker can trick an authenticated administrator into visiting a crafted URL to delete or duplicate Category Report configurations, affecting the integrity and availability of that module&#39;s configuration.</p> <p>Admidio before 5.0.11 does not validate the adm_csrf_token in modules/category-report/preferences.php, which performs persistent Category Report configuration changes based on GET parameters (delete and copy). An attacker can trick an authenticated administrator into visiting a crafted URL to delete or duplicate Category Report configurations, affecting the integrity and availability of that module&#39;s configuration.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-69093 https://cve.radiocsirt.org/vuln/ghsa-xp3j-j2g9-8cmv <p>Admidio before 5.0.11 does not validate the adm_csrf_token in modules/category-report/preferences.php, which performs persistent Category Report configuration changes based on GET parameters (delete and copy). An attacker can trick an authenticated administrator into visiting a crafted URL to delete or duplicate Category Report configurations, affecting the integrity and availability of that module&#39;s configuration.</p> <p>Admidio before 5.0.11 does not validate the adm_csrf_token in modules/category-report/preferences.php, which performs persistent Category Report configuration changes based on GET parameters (delete and copy). An attacker can trick an authenticated administrator into visiting a crafted URL to delete or duplicate Category Report configurations, affecting the integrity and availability of that module&#39;s configuration.</p> https://cve.radiocsirt.org/vuln/ghsa-xp3j-j2g9-8cmv