CVE-2020-6850

概要

参考情報

• wordpress.org/plugins/miniorange-saml-20-single-sign-on · Product
• zeroauth.ltd/blog · Exploit
• zeroauth.ltd/blog/2020/01/28/cve-2020-6850-miniorange-saml-wp-plugin-before-4-8-84-is-vulnerable-to-xss-via-a-specially-crafted-saml-xml-response · Exploit

saml sp single sign on のその他の脆弱性

• CVE-2022-4496中 6.1The SAML SSO Standard WordPress plugin version 16.0.0 before 16.0.8, SAML SSO Premium WordPress plugin version 12.0.0 before 12.1.0 and SAML…
• CVE-2019-12346中 6.1In the miniOrange SAML SP Single Sign On plugin before 4.8.73 for WordPress, the SAML Login Endpoint is vulnerable to XSS via a specially cr…