CVE-2017-18121

Name of the Vulnerable Software and Affected Versions: SimpleSAMLphp versions prior to 1.14.16

Description: The issue allows an attacker to perform a Cross-Site Scripting attack by crafting links that execute arbitrary JavaScript code on the victim's web browser. This is due to a vulnerability in the consentAdmin module.

Recommendations: For versions prior to 1.14.16, update to version 1.14.16 or later to resolve the issue. As a temporary workaround, consider restricting access to the consentAdmin module to minimize the risk of exploitation.