Lucene search
PRIOn knowledge basePRION:CVE-2020-11025HistoryApr 30, 2020 - 10:15 p.m.
Cross site scripting
2020-04-3022:15:00
PRIOn knowledge base
www.prio-n.com
1
In affected versions of WordPress, a cross-site scripting (XSS) vulnerability in the navigation section of Customizer allows JavaScript code to be executed. Exploitation requires an authenticated user. This has been patched in version 5.4.1, along with all the previously affected versions via a minor release (5.3.3, 5.2.6, 5.1.5, 5.0.9, 4.9.14, 4.8.13, 4.7.17, 4.6.18, 4.5.21, 4.4.22, 4.3.23, 4.2.27, 4.1.30, 4.0.30, 3.9.31, 3.8.33, 3.7.33).
| CPE | Name | Operator | Version |
|---|---|---|---|
| debian_linux | eq | 9.0 | |
| debian_linux | eq | 10.0 | |
| wordpress | ge | 4.7 | |
| wordpress | lt | 5.4.1 |
Related
osv
osv
BIT-wordpress-2020-11025
2024-03-06 11:12:18
BIT-wordpress-multisite-2020-11025
2024-03-06 11:12:10
CVE-2020-11025
2020-04-30 22:15:11
veracode
veracode
Cross-site Scripting (XSS)
2020-05-04 07:30:15
wpvulndb
wpvulndb
WordPress < 5.4.1 - Authenticated Cross-Site Scripting (XSS) in Customizer
2020-04-29 00:00:00
ubuntucve
ubuntucve
CVE-2020-11025
2020-04-30 00:00:00
debiancve
debiancve
CVE-2020-11025
2020-04-30 22:15:11
cve
cve
CVE-2020-11025
2020-04-30 22:15:11
openvas
openvas
WordPress XSS Vulnerability (May 2020) - Linux
2020-05-05 00:00:00
WordPress XSS Vulnerability (May 2020) - Windows
2020-05-05 00:00:00
Debian: Security Advisory (DSA-4677-1)
2020-05-07 00:00:00
cvelist
cvelist
nvd
nvd
CVE-2020-11025
2020-04-30 22:15:11
debian
debian
[SECURITY] [DSA 4677-1] wordpress security update
2020-05-06 06:30:09
[SECURITY] [DSA 4677-1] wordpress security update
2020-05-06 06:30:09
nessus
nessus
Debian DSA-4677-1 : wordpress - security update
2020-05-07 00:00:00