CVE-2019-12346

In the miniOrange SAML SP Single Sign On plugin before 4.8.73 for WordPress, the SAML Login Endpoint is vulnerable to XSS via a specially crafted SAMLResponse…

published June 24, 2019

CVSS
—
EPSS
1%
Percentile
64.5
In the wild
Unconfirmed
What it is

In the miniOrange SAML SP Single Sign On plugin before 4.8.73 for WordPress, the SAML Login Endpoint is vulnerable to XSS via a specially crafted SAMLResponse XML post.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01066 · 64.5th percentile
Published
2019-06-24T20:25Z
EPSS history
Timeline
  • 24 JUN 20:25Z
    In the miniOrange SAML SP Single Sign On plugin before 4.8.73 for WordPress, the SAML Login Endpoint is vulnerable to XSS via a specially crafted SAMLResponse…
    cvelistv5