The consentAdmin module in SimpleSAMLphp through 1.14.15 is vulnerable to a Cross-Site Scripting attack, allowing an attacker to craft links that could execute arbitrary JavaScript code on the victim's web browser.
| Package (Ecosystem) | Introduced | Fixed | Limit |
|---|---|---|---|
| simplesamlphp/simplesamlphp(Packagist) | 1.12.0 | 1.14.16 | N/A |
CVSS Metrics
