2 matches found
CVE-2026-69092
Admidio versions before 5.0.11 contain a reflected cross-site scripting vulnerability in the SSO/SAML endpoint that echoes unencoded exception messages to the HTTP response. Unauthenticated attackers can inject arbitrary JavaScript through SAML Issuer elements or LightSaml library parameters to...
6.9CVSS6.1AI score0.00376EPSS
SaveExploits0References4
CVE-2026-69092: Improper Neutralization of Input During Web Page Generation
Admidio versions before 5.0.11 contain a reflected cross-site scripting vulnerability in the SSO/SAML endpoint that echoes unencoded exception messages to the HTTP response. Unauthenticated attackers can inject arbitrary JavaScript through SAML Issuer elements or LightSaml library parameters to...
6.9CVSS6.1AI score0.00376EPSS
SaveExploits0References2
20