Threats affecting pkg:composer/admidio

Admidio versions prior to 5.0.17 have an improper access control vulnerability that allows authenticated users to bypass server-side restrictions on event guest registration. Specifically, attackers can manipulate the additional_guests field to register more guests than allowed, exhausting event capacity and preventing other users from registering.