3 matches found
DEBIAN-CVE-2019-20041
wpksesbadprotocol in wp-includes/kses.php in WordPress before 5.3.1 mishandles the HTML5 colon named entity, allowing attackers to bypass input sanitization, as demonstrated by the javascript substring...
9.8CVSS8.6AI score0.04654EPSS
SaveExploits1References1
CVE-2019-20041
wpksesbadprotocol in wp-includes/kses.php in WordPress before 5.3.1 mishandles the HTML5 colon named entity, allowing attackers to bypass input sanitization, as demonstrated by the javascript substring...
9.8CVSS4.4AI score0.04654EPSS
SaveExploits1
CVE-2019-20041: Improper Input Validation
wpksesbadprotocol in wp-includes/kses.php in WordPress before 5.3.1 mishandles the HTML5 colon named entity, allowing attackers to bypass input sanitization, as demonstrated by the javascript substring...
9.8CVSS7.7AI score0.04654EPSS
SaveExploits1References2
20