Saml Sp Single Sign On Security Vulnerabilities and Issues — Saml Sp Single Sign On CVE List

Lucene search

MiniorangeSaml Sp Single Sign On

4 matches found

CVE•added 2019/06/24 9:15 p.m.•98 views

CVE-2019-12346

In the miniOrange SAML SP Single Sign On plugin before 4.8.73 for WordPress, the SAML Login Endpoint is vulnerable to XSS via a specially crafted SAMLResponse XML post.

6.1CVSS5.9AI score0.00141EPSS

CVE•added 2020/02/17 4:15 p.m.•73 views

CVE-2020-6850

Utilities.php in the miniorange-saml-20-single-sign-on plugin before 4.8.84 for WordPress allows XSS via a crafted SAML XML Response to wp-login.php. This is related to the SAMLResponse and RelayState variables, and the Destination parameter of the samlp:Response XML element.

6.1CVSS5.9AI score0.00363EPSS

CVE•added 2023/01/30 9:15 p.m.•41 views

CVE-2022-4496

The SAML SSO Standard WordPress plugin version 16.0.0 before 16.0.8, SAML SSO Premium WordPress plugin version 12.0.0 before 12.1.0 and SAML SSO Premium Multisite WordPress plugin version 20.0.0 before 20.0.7 does not validate that the redirect parameter to its SSO login endpoint points to an inter...

6.1CVSS6.2AI score0.00385EPSS

CVE•added 2024/12/13 3:15 p.m.•36 views

CVE-2023-41873

Missing Authorization vulnerability in miniOrange SAML SP Single Sign On allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SAML SP Single Sign On: from n/a through 5.0.4.

4.3CVSS4.7AI score0.00091EPSS