{"action":"Upgrade admidio/admidio to 5.0.7 or later.","affected":[{"fixed":"5.0.7","introduced":"0"}],"component":"admidio/admidio","cve_ids":["CVE-2026-32813"],"ecosystem":"Packagist","epss":0.0029,"exploited":false,"fixed_versions":["5.0.7"],"ghsa_id":"GHSA-3x67-4c2c-w45m","id":"tcs_01M5KETCEQC6V3332JDDFMAMNV","modified_at":"2026-03-20T21:33:45.799127Z","published_at":"2026-03-16T21:19:09Z","references":["https://osv.dev/vulnerability/GHSA-3x67-4c2c-w45m","https://github.com/Admidio/admidio/security/advisories/GHSA-3x67-4c2c-w45m","https://nvd.nist.gov/vuln/detail/CVE-2026-32813","https://github.com/Admidio/admidio/commit/3473bf5a7aa1bfc5043e73979719396276f4189f","https://github.com/Admidio/admidio"],"severity":{"label":"high","score":8},"sources":[{"source":"osv","source_id":"GHSA-3x67-4c2c-w45m","url":"https://osv.dev/vulnerability/GHSA-3x67-4c2c-w45m"}],"summary":"Admidio has a Second-Order SQL Injection via List Configuration (lsc_special_field, lsc_sort, lsc_filter)"}