CVE-2026-69093

Name of the Vulnerable Software and Affected Versions Admidio versions prior to 5.0.11

Description Cross-Site Request Forgery (CSRF) occurs because the application fails to validate the adm csrf token in the 'modules/category-report/preferences.php' endpoint. This allows an attacker to trick an authenticated administrator into visiting a crafted URL to perform persistent Category Report configuration changes, such as deleting or duplicating configurations, via GET parameters. This issue impacts the integrity and availability of the module configuration.

Recommendations Update to version 5.0.11 or later.