cleantalk
Vulnerabilities and Security Researches

Active Directory Integration / LDAP Integration, f9fd62f7-e086-43cc-b08b-5e04d8723c91

Published on
-
Research Description
Active Directory Integration / LDAP Integration [ldap-login-for-intranet-sites] < 3.6.95 Active Directory Integration / LDAP Integration &lt; 3.6.95 - Reflected Cross-Site Scripting The plugin does not escape the test_username parameter before outputting it back in the settings page, leading to a Reflected Cross-Site Scripting issue
Affected versions
max 3.6.95.
Status
vulnerable