Packagist/admidio/admidio CVE-2026-32813: high 8, EPSS 0.43%
Admidio has a Second-Order SQL Injection via List Configuration (lsc_special_field, lsc_sort, lsc_filter)
Action: Upgrade admidio/admidio to 5.0.7 or later.
composer require admidio/admidio:5.0.7Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.0.7 | - |
Fixed versions
| 5.0.7 |
Sources
- osv: GHSA-3x67-4c2c-w45m
- https://github.com/Admidio/admidio/security/advisories/GHSA-3x67-4c2c-w45m
- https://nvd.nist.gov/vuln/detail/CVE-2026-32813
- https://github.com/Admidio/admidio/commit/3473bf5a7aa1bfc5043e73979719396276f4189f
- https://github.com/Admidio/admidio
CVE-2026-32813 · published · modified · JSON