Lucene search
WpvulndbWPVDB-ID:CDA65567-3148-40DB-BC6A-E4FCA984715AHistorySep 08, 2021 - 12:00 a.m.
simpleSAMLphp Authentication <= 0.7.0 - Reflected Cross-Site Scripting
2021-09-0800:00:00
wpscan.com
11
0.001 Low
EPSS
Percentile
32.8%
The plugin is vulnerable to Reflected Cross-Site Scripting due to a reflected $_SERVER[“PHP_SELF”] value in the ~/simplesamlphp-authentication.php file which allows attackers to inject arbitrary web scripts
| CPE | Name | Operator | Version |
|---|---|---|---|
| simplesamlphp-authentication | eq | * |
Related
cvelist
cvelist
patchstack
patchstack
nvd
nvd
CVE-2021-38320
2021-09-09 19:15:13
cve
cve
CVE-2021-38320
2021-09-09 19:15:13
prion
prion
Cross site scripting
2021-09-09 19:15:00