Active Directory Integration / LDAP Integration, f9fd62f7-e086-43cc-b08b-5e04d8723c91
- CVE, Research URL
- Application
- Published on
- -
- Research Description
- Active Directory Integration / LDAP Integration [ldap-login-for-intranet-sites] < 3.6.95 Active Directory Integration / LDAP Integration < 3.6.95 - Reflected Cross-Site Scripting The plugin does not escape the test_username parameter before outputting it back in the settings page, leading to a Reflected Cross-Site Scripting issue
- Affected versions
-
max 3.6.95.
- Status
-
vulnerable