Description

The web application uses SAML. The web application's SAML Consumer Service is vulnerable to XSS due to lack of sanitization of values from SAMLResponse.
An unauthenticated attacker may be able to use it to attack other users.

Remediation

Apply context-dependent sanitization to SAMLResponse values rendered on a page

References

Cross Site Scripting Prevention Cheat Sheet

Related Vulnerabilities

WordPress Plugin Easy Forms for Mailchimp Cross-Site Scripting (5.0.6)

WordPress Plugin User Profile Builder-Beautiful User Registration Forms, User Profiles & User Role Editor Cross-Site Scripting (3.4.7)

WordPress Plugin Related Posts Cross-Site Scripting (5.12.91)

WordPress Plugin Automated Editor Cross-Site Scripting (1.3)

WordPress Plugin Roomcloud Multiple Cross-Site Scripting Vulnerabilities (1.1)

Severity

High

Classification

CWE-80 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N

Tags

XSS