Admidio Cross-Site Scripting Vulnerability (CNVD-2021-100289)

Admidio is an open source membership management system from the Admidio team. The system supports member list, event management, guestbook, photo album and downloads.A cross-site scripting vulnerability exists in versions of Admidio prior to 4.0.12, which stems from redirect.php failing to properly validate the value of the url parameter. No details of the vulnerability are currently available.