← All advisories

Medium severity5.4NVD Advisory· Published Jun 5, 2023· Updated Jun 17, 2026

CVE-2023-3109

CVE-2023-3109

Description

Cross-site Scripting (XSS) - Stored in GitHub repository admidio/admidio prior to 4.2.8.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
admidio/admidioPackagist	< 4.2.8	4.2.8

Affected products

3

Admidio/Admidio2 versions
cpe:2.3:a:admidio:admidio:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:admidio:admidio:*:*:*:*:*:*:*:*range: <4.2.8
- (no CPE)range: unspecified
ghsa-coords
pkg:composer/admidio/admidio
Range: < 4.2.8

Patches

Vulnerability mechanics

References

4

github.com/admidio/admidio/commit/a7c211b835cafe1158932fbfcff9e5552e57510anvdPatchWEB
huntr.dev/bounties/6fa6070e-8f7f-43ae-8a84-e36b28256123nvdExploitThird Party AdvisoryWEB
github.com/advisories/GHSA-gx4r-fvwg-8678ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2023-3109ghsaADVISORY

News mentions

0

No linked articles in our index yet.