Login with Azure (Azure SSO), c6ed33faf4d01e26dafb51a8006cc4f1d3df0c89

CVE, Research URL: c6ed33faf4d01e26dafb51a8006cc4f1d3df0c89
Home page URL: Security reports for Login with Azure (Azure SSO)
Application: Login with Azure (Azure SSO)
Published on: Aug 30, 2021
Research Description: All-in-One Microsoft Office 365 Apps + Azure/EntraID Login [login-with-azure] < 1.4.5 Multiple miniOrange Plugins (Various Version) - Reflected Cross-Site Scripting Multiple miniorange Plugins for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'appId' parameter due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
Affected versions: max 1.4.5.
Status: vulnerable