CVE-2023-52430

The caddy-security plugin 1.1.20 for Caddy allows reflected XSS via a GET request to a URL that contains an XSS payload and begins with either a /admin or /settings/mfa/delete/ substring.

Date published : 2024-02-12

Security flaws in an SSO plugin for Caddy

https://github.com/greenpau/caddy-security/issues/264