CVE-2014-2890

Siege Phpmyid - XSS

Title source: rule

Description

Cross-site scripting (XSS) vulnerability in the wrap_html function in MyID.php in phpMyID 0.9 allows remote attackers to inject arbitrary web script or HTML via the openid_error parameter to MyID.config.php when the openid.mode parameter is set to error, which is not properly handled in an error message.

References (3)

Scores

EPSS 0.0036
EPSS Percentile 57.8%

Details

CWE
CWE-79
Status published
Products (2)
siege/phpmyid
n/a/n/a
Published Apr 22, 2014
Tracked Since Feb 18, 2026