Lucene search

K
prionPRIOn knowledge basePRION:CVE-2020-6850
HistoryFeb 17, 2020 - 4:15 p.m.

Cross site scripting

2020-02-1716:15:00
PRIOn knowledge base
www.prio-n.com
4

0.002 Low

EPSS

Percentile

53.5%

Utilities.php in the miniorange-saml-20-single-sign-on plugin before 4.8.84 for WordPress allows XSS via a crafted SAML XML Response to wp-login.php. This is related to the SAMLResponse and RelayState variables, and the Destination parameter of the samlp:Response XML element.

CPENameOperatorVersion
saml_sp_single_sign_onlt4.8.84

0.002 Low

EPSS

Percentile

53.5%

Related for PRION:CVE-2020-6850