CyberRota Analysis
This is a medium severity vulnerability with a CVSS score of 6.1. It affects WordPress.
CVE
CVE-2020-6850
Severity
MEDIUM
CVSS
6.1
EPSS
1.38%
WordPress
Original NVD Description
Utilities.php in the miniorange-saml-20-single-sign-on plugin before 4.8.84 for WordPress allows XSS via a crafted SAML XML Response to wp-login.php. This is related to the SAMLResponse and RelayState variables, and the Destination parameter of the samlp:Response XML element.
Related CVEs
Other vulnerabilities affecting the same vendor(s)