CVE-2026-69092 Details

A reflected cross-site scripting vulnerability has been identified in Admidio versions prior to 5.0.11. This issue resides in the SSO/SAML endpoint, specifically within 'modules/sso/index.php'. The vulnerability arises because the exception handler outputs unencoded exception messages directly to the HTTP response. Unauthenticated attackers can exploit this by injecting arbitrary JavaScript through SAML Issuer elements or LightSaml library parameters. The injected script is executed in the context of the user's browser, potentially leading to session hijacking.

Users are advised to update Admidio to version 5.0.11 or later. Additionally, it is recommended to HTML-encode all exception outputs in the SSO/SAML endpoint, wrap the SAML request handling in a try/catch block to properly manage exceptions, and add security headers such as Content-Security-Policy and X-Content-Type-Options.