VendorsminiOrangesaml_sp_single_sign_onall versions
Vulnerabilities

miniOrange SAMP SP Single Sign On

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

3CVEs
CVE-2020-6850
Utilities.php in the miniorange-saml-20-single-sign-on plugin before 4.8.84 for WordPress allows XSS via a crafted SAML XML Response to wp-login.php. This is related to the SAMLResponse and RelayState variables, and the Destination parameter of the samlp:Response XML element.
Published 2020-02-17 · Modified
6.1EPSS 0.014
CVE-2019-12346
In the miniOrange SAML SP Single Sign On plugin before 4.8.73 for WordPress, the SAML Login Endpoint is vulnerable to XSS via a specially crafted SAMLResponse XML post.
Published 2019-06-24 · Modified
6.1EPSS 0.011
CVE-2022-4496
miniOrange WordPress SAML SSO multiple versions - Open Redirect in SSO login
Published 2023-01-30 · Modified
6.1EPSS 0.006