VYPR
← All advisories
Medium severity4.6OSV Advisory· Published Aug 3, 2026· Updated Sep 9, 2026

CVE-2026-69093

CVE-2026-69093

Description

Admidio before 5.0.11 does not validate the adm_csrf_token in modules/category-report/preferences.php, which performs persistent Category Report configuration changes based on GET parameters (delete and copy). An attacker can trick an authenticated administrator into visiting a crafted URL to delete or duplicate Category Report configurations, affecting the integrity and availability of that module's configuration.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Admidio/Admidiollm-fuzzy2 versions
    <5.0.11+ 1 more
    • (no CPE)range: <5.0.11
    • (no CPE)range: v5.0-Beta.1, v4.3-Beta.1, v4.1-Beta.2, …

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.