{"id":"CVE-2022-23896","details":"Admidio 4.1.2 version is affected by stored cross-site scripting (XSS).","aliases":["GHSA-qr6m-f3gv-8678"],"modified":"2026-08-12T03:51:32.640686955Z","published":"2022-06-28T12:11:53Z","database_specific":{"cna_assigner":"mitre","osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/23xxx/CVE-2022-23896.json"},"references":[{"type":"WEB","url":"https://huntr.dev/bounties/79c2d16c-bae2-417f-ab50-10c52707a30f/"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/23xxx/CVE-2022-23896.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23896"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/admidio/admidio","events":[{"introduced":"0"},{"fixed":"e97a9729d38d4f06fcadb4aa6d4702b7f18fe5d5"}],"database_specific":{"cpe":"cpe:2.3:a:admidio:admidio:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"fixed":"4.1.3"}],"source":"CPE_RANGE"}}],"versions":["v4.1.2","v4.1.1","v4.1.0","v4.1-Beta.2","v4.0-Beta.1","v3.2-Beta.1","v3.1.5","v3.0.6","3.0-Beta.3","3.0-Beta.1"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-23896.json"}}],"schema_version":"1.9.0"}