OAuth client Single Sign On for WordPress ( OAuth 2.0 SSO ), ebc129d7855446f1b4ea794ee62482115be97075

CVE, Research URL: ebc129d7855446f1b4ea794ee62482115be97075
Home page URL: Security reports for OAuth client Single Sign On for WordPress ( OAuth 2.0 SSO )
Application: OAuth client Single Sign On for WordPress ( OAuth 2.0 SSO )
Published on: May 03, 2022
Research Description: OAuth client Single Sign On for WordPress ( OAuth 2.0 SSO ) [oauth-client-for-user-authentication] < 3.0.2 OAuth client Single Sign On for WordPress ( OAuth 2.0 SSO ) <= 3.0.1 - Cross-Site Scripting The OAuth client Single Sign On for WordPress ( OAuth 2.0 SSO ) plugin for WordPress is vulnerable to Cross-Site Scripting via the $key variable in versions up to, and including 3.0.1.
Affected versions: max 3.0.2.
Status: vulnerable