CVE-2014-2890

The CVE-2014-2890 entry affects phpMyID 0.9. The XSS vulnerability is in the wrap_html function of MyID.php, exploitable via the openid_error parameter to MyID.config.php when openid.mode is set to error. This allows remote attackers to inject arbitrary web script or HTML; the issue stems from im...