CVE-2020-6850: 
WordPress vulnerability analysis and mitigation

The vulnerability CVE-2020-6850 affects the miniorange-saml-20-single-sign-on WordPress plugin versions before 4.8.84. The security flaw allows for Cross-Site Scripting (XSS) attacks through a specially crafted SAML XML Response sent to wp-login.php. The vulnerability specifically involves the SAMLResponse and RelayState variables, as well as the Destination parameter of the samlp:Response XML element (NVD, CVE MITRE).

The vulnerability exists in the Utilities.php file of the plugin and can be exploited through manipulation of the SAML XML Response. The attack vector involves crafting specific payload targeting the SAMLResponse and RelayState variables, along with the Destination parameter within the samlp:Response XML element (NVD).

If successfully exploited, this XSS vulnerability could allow attackers to inject malicious scripts into the WordPress site, potentially leading to theft of sensitive information, session hijacking, or other malicious actions typically associated with cross-site scripting attacks (NVD).

The recommended mitigation is to update the miniorange-saml-20-single-sign-on plugin to version 4.8.84 or later, which contains the security fix for this vulnerability (WordPress Plugin).