mod_auth_openidc is an authentication/authorization module for the Apache 2.x HTTP server that functions as an OpenID Connect Relying Party authenticating users against an OpenID Connect Provider. In mod_auth_openidc before version 2.4.9 there is an XSS vulnerability in when using `OIDCPreservePost On`.