Vulnerability Description
Utilities.php in the miniorange-saml-20-single-sign-on plugin before 4.8.84 for WordPress allows XSS via a crafted SAML XML Response to wp-login.php. This is related to the SAMLResponse and RelayState variables, and the Destination parameter of the samlp:Response XML element.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Miniorange | Saml Sp Single Sign On | < 4.8.84 |
Related Weaknesses (CWE)
References
- https://wordpress.org/plugins/miniorange-saml-20-single-sign-on/#developersProductThird Party Advisory
- https://zeroauth.ltd/blog/ExploitThird Party Advisory
- https://zeroauth.ltd/blog/2020/01/28/cve-2020-6850-miniorange-saml-wp-plugin-befExploitThird Party Advisory
- https://wordpress.org/plugins/miniorange-saml-20-single-sign-on/#developersProductThird Party Advisory
- https://zeroauth.ltd/blog/ExploitThird Party Advisory
- https://zeroauth.ltd/blog/2020/01/28/cve-2020-6850-miniorange-saml-wp-plugin-befExploitThird Party Advisory
FAQ
What is CVE-2020-6850?
CVE-2020-6850 is a vulnerability with a CVSS score of 6.1 (MEDIUM). Utilities.php in the miniorange-saml-20-single-sign-on plugin before 4.8.84 for WordPress allows XSS via a crafted SAML XML Response to wp-login.php. This is related to the SAMLResponse and RelayState...
How severe is CVE-2020-6850?
CVE-2020-6850 has been rated MEDIUM with a CVSS base score of 6.1/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-6850?
Check the references section above for vendor advisories and patch information. Affected products include: Miniorange Saml Sp Single Sign On.