TI-2026-01500 CVE-2026-1824 · GHSA-pmxc-wcq3-pr53
Cross-site scripting in leopoldinfomaniak Infomaniak Connect for OpenID
Priority LOW 28
The Infomaniak Connect for OpenID plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'endpoint_login' parameter of the infomaniak_connect_generic_auth_url shortcode in all versions up to, and inclu…