Lucene search
WpvulndbWPVDB-ID:CDA65567-3148-40DB-BC6A-E4FCA984715AHistorySep 08, 2021 - 12:00 a.m.
simpleSAMLphp Authentication <= 0.7.0 - Reflected Cross-Site Scripting
2021-09-0800:00:00
wpscan.com
12
simplesamlphp
authentication
vulnerability
cross-site scripting
web scripts
$_server["php_self"]
EPSS
0.001
Percentile
32.7%
The plugin is vulnerable to Reflected Cross-Site Scripting due to a reflected $_SERVER[“PHP_SELF”] value in the ~/simplesamlphp-authentication.php file which allows attackers to inject arbitrary web scripts
Related
cvelist
cvelist
patchstack
patchstack
nvd
nvd
CVE-2021-38320
2021-09-09 19:15:13
prion
prion
Cross site scripting
2021-09-09 19:15:00
cve
cve
CVE-2021-38320
2021-09-09 19:15:13