Is IDmelon WebLogin safe?
Medium risk
IDmelon WebLogin accepts unauthenticated postMessages from any webpage and can redirect its backend API calls to an attacker-controlled server.
Part of this rating comes from analysis signals we haven't published as detailed findings yet.
45Risk
AI-generated. Findings may contain errors. Those marked Verified have been manually reviewed.
Publishers can request a review.