Vulnerabilities > Miniorange

DATE CVE VULNERABILITY TITLE RISK
2019-06-24 CVE-2019-12346 Cross-site Scripting vulnerability in Miniorange Saml SP Single Sign on
In the miniOrange SAML SP Single Sign On plugin before 4.8.73 for WordPress, the SAML Login Endpoint is vulnerable to XSS via a specially crafted SAMLResponse XML post.
network
low complexity
miniorange CWE-79
6.1