SAML Single Sign On – SSO Login, cc45319e99b421896e2ccf543ab2dd31227ae288

CVE, Research URL: cc45319e99b421896e2ccf543ab2dd31227ae288
Home page URL: Security reports for SAML Single Sign On – SSO Login
Application: SAML Single Sign On – SSO Login
Published on: Jun 06, 2022
Research Description: SAML Single Sign On – SSO Login [miniorange-saml-20-single-sign-on] < 4.9.21 SAML Single Sign On – SAML SSO Login <= 4.9.20 - Reflected Cross-Site Scripting The SAML Single Sign On – SAML SSO Login plugin for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without appropriate escaping on the URL in versions up to, and including, 4.9.20. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.
Affected versions: max 4.9.21.
Status: vulnerable