https://www.admidio.org/
Admidio – Free online membership management software
Admidio is a free online membership management, which is optimized for associations, groups and organizations. In addition to classic user management it...
online membership managementadmidiofreesoftware
https://advisories.gitlab.com/composer/admidio/admidio/GHSA-rmpj-3x5m-9m5f/
Admidio is Missing Authorization and CSRF Protection on Document and Folder Deletion | GitLab...
GHSA-rmpj-3x5m-9m5f Admidio is Missing Authorization and CSRF Protection on Document and Folder Deletion: The documents and files module in Admidio does not...
csrf protection
https://advisories.gitlab.com/composer/admidio/admidio/CVE-2026-41671/
Admidio: OIDC Token Introspection Endpoint Returns Active for All Tokens Without Validation |...
CVE-2026-41671 Admidio: OIDC Token Introspection Endpoint Returns Active for All Tokens Without Validation: The OIDC token introspection endpoint...
token introspection
https://advisories.gitlab.com/composer/admidio/admidio/CVE-2026-41661/
Admidio vulnerable to reflected XSS in msg_window.php via Square Bracket to HTML Tag Conversion |...
CVE-2026-41661 Admidio vulnerable to reflected XSS in msg_window.php via Square Bracket to HTML Tag Conversion: An unauthenticated attacker can execute...
https://advisories.gitlab.com/composer/admidio/admidio/CVE-2026-41659/
Admidio Leaks Hidden Profile Field Values via Blind Search Oracle in Member Assignment | GitLab...
CVE-2026-41659 Admidio Leaks Hidden Profile Field Values via Blind Search Oracle in Member Assignment: The member assignment DataTables endpoint...
https://advisories.gitlab.com/composer/admidio/admidio/CVE-2026-41670/
Admidio Sends SAML Response to Unvalidated Assertion Consumer Service URL from AuthnRequest |...
CVE-2026-41670 Admidio Sends SAML Response to Unvalidated Assertion Consumer Service URL from AuthnRequest: The SAML IdP implementation in Admidio's SSO module...
https://advisories.gitlab.com/composer/admidio/admidio/CVE-2026-32812/
Admidio Vulnerable to SSRF and Local File Read via Unrestricted URL Fetch in SSO Metadata Endpoint...
CVE-2026-32812 Admidio Vulnerable to SSRF and Local File Read via Unrestricted URL Fetch in SSO Metadata Endpoint: The SSO metadata fetch endpoint at...
https://advisories.gitlab.com/composer/admidio/admidio/CVE-2026-32817/
Admidio is Missing Authorization and CSRF Protection on Document and Folder Deletion | GitLab...
CVE-2026-32817 Admidio is Missing Authorization and CSRF Protection on Document and Folder Deletion: The documents and files module in Admidio does not verify...
csrf protection
https://advisories.gitlab.com/composer/admidio/admidio/CVE-2026-34384/
Admidio has Missing CSRF Protection on Registration Approval Actions | GitLab Advisory Database...
CVE-2026-34384 Admidio has Missing CSRF Protection on Registration Approval Actions: The create_user, assign_member, and assign_user action modes in...
csrf protection
https://advisories.gitlab.com/composer/admidio/admidio/GHSA-wwg8-6ffr-h4q2/
Admidio is Missing CSRF Validation on Role Delete, Activate, and Deactivate Actions | GitLab...
GHSA-wwg8-6ffr-h4q2 Admidio is Missing CSRF Validation on Role Delete, Activate, and Deactivate Actions: The delete, activate, and deactivate modes in...
https://advisories.gitlab.com/composer/admidio/admidio/CVE-2026-34383/
Admidio has CSRF and Form Validation Bypass in Inventory Item Save via `imported` Parameter |...
CVE-2026-34383 Admidio has CSRF and Form Validation Bypass in Inventory Item Save via `imported` Parameter: The inventory module's item_save endpoint accepts a...
https://advisories.gitlab.com/composer/admidio/admidio/CVE-2026-32816/
Admidio is Missing CSRF Validation on Role Delete, Activate, and Deactivate Actions | GitLab...
CVE-2026-32816 Admidio is Missing CSRF Validation on Role Delete, Activate, and Deactivate Actions: The delete, activate, and deactivate modes in...
https://advisories.gitlab.com/composer/admidio/admidio/CVE-2026-34382/
Admidio has Missing CSRF Protections on Custom List Deletion in mylist_function.php | GitLab...
CVE-2026-34382 Admidio has Missing CSRF Protections on Custom List Deletion in mylist_function.php: The delete mode handler in mylist_function.php permanently...