CVE-2021-36785: Miniorange SAML

Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days.

The miniorange_saml (aka Miniorange Saml) extension before 1.4.3 for TYPO3 allows XSS.

Affected products

• Miniorange SAML: before 1.4.3 (fixed in 1.4.3)

Published 2021-08-13. Last modified 2026-06-17.