Vulnerabilities and Security Researches

SAML Single Sign On – SSO Login, CVE-2019-12346

CVE, Research URL: CVE-2019-12346
Home page URL: Security reports for SAML Single Sign On – SSO Login
Application: SAML Single Sign On – SSO Login
Published on: Jun 25, 2019
Research Description: In the miniOrange SAML SP Single Sign On plugin before 4.8.73 for WordPress, the SAML Login Endpoint is vulnerable to XSS via a specially crafted SAMLResponse XML post.
Affected versions: max 4.8.73.
Status: vulnerable