Edito CMS suffers from a Dynamic LINQ injection vulnerability in its paginated administrative endpoints. An authenticated attacker can inject conditional expressions into the sort parameter, enabling extraction of sensitive data character by character through analysis of result ordering. This vulnerability has been fixed in version 5.10.2607, with hotfixes available for older 5.8 versions.