{"action":"Upgrade admidio/admidio to 5.0.6 or later.","affected":[{"fixed":"5.0.6","introduced":"0"}],"component":"admidio/admidio","cve_ids":["CVE-2026-30927"],"ecosystem":"Packagist","epss":0.00366,"exploited":false,"fixed_versions":["5.0.6"],"ghsa_id":"GHSA-7pfv-hr63-h7cw","id":"tcs_01M5KEY9PT327KHN0CMASBY07B","modified_at":"2026-03-10T18:48:30.504905Z","published_at":"2026-03-09T19:45:20Z","references":["https://osv.dev/vulnerability/GHSA-7pfv-hr63-h7cw","https://github.com/Admidio/admidio/security/advisories/GHSA-7pfv-hr63-h7cw","https://nvd.nist.gov/vuln/detail/CVE-2026-30927","https://github.com/Admidio/admidio/issues/1985","https://github.com/Admidio/admidio/commit/e47f70cc3cbcdb39635fdbaaef02d19f604b8c3e","https://github.com/Admidio/admidio"],"severity":{"label":"unknown","score":0},"sources":[{"source":"osv","source_id":"GHSA-7pfv-hr63-h7cw","url":"https://osv.dev/vulnerability/GHSA-7pfv-hr63-h7cw"}],"summary":"Admidio: Event participation IDOR - non-leaders can register other users for events via user_uuid parameter"}