CVE-2017-14313: Shibboleth Project Shibboleth

Medium severity, CVSS 6.1. EPSS: 1.5% chance of exploitation in the next 30 days.

The shibboleth_login_form function in shibboleth.php in the Shibboleth plugin before 1.8 for WordPress is prone to an XSS vulnerability due to improper use of add_query_arg().

Affected products

• Shibboleth Project Shibboleth: up to and including 1.7

Published 2017-09-12. Last modified 2026-06-17.