Cross site scripting

Cross-site scripting XSS vulnerability in the wraphtml function in MyID.php in phpMyID 0.9 allows remote attackers to inject arbitrary web script or HTML via the openiderror parameter to MyID.config.php when the openid.mode parameter is set to error, which is not properly handled in an error...

PT-2014-4949

Name of the Vulnerable Software and Affected Versions phpMyID version 0.9 Description A cross-site scripting XSS issue exists due to improper handling of the openid error parameter in error messages when openid.mode is set to error. This allows remote attackers to inject arbitrary web script or...