Lucene search

CVE-2019-20042

🗓️ 27 Dec 2019 00:00:00Reported by ubuntu.comType

Stored XSS vulnerability in WordPress wp_targeted_link_rel

Reporter	Title	Published	Views	Family All 24
Symantec	WordPress CVE-2019-20042 HTML Injection Vulnerability	27 Dec 201900:00	–	symantec
RedhatCVE	CVE-2019-20042	20 May 202223:52	–	redhatcve
OSV	CVE-2019-20042	27 Dec 201908:15	–	osv
OSV	wordpress - security update	8 Jan 202000:00	–	osv
NVD	CVE-2019-20042	27 Dec 201908:15	–	nvd
NVD	CVE-2019-16773	9 Jan 202002:15	–	nvd
CVE	CVE-2019-20042	27 Dec 201908:15	–	cve
CVE	CVE-2019-16773	9 Jan 202002:15	–	cve
WPVulnDB	WordPress <= 5.3 - Authenticated Stored XSS via Crafted Links	13 Dec 201900:00	–	wpvulndb
Veracode	Cross-Site Scripting (XSS)	30 Dec 201904:18	–	veracode

Source	Link
core	www.core.trac.wordpress.org/changeset/46894/trunk
github	www.github.com/WordPress/wordpress-develop/commit/1f7f3f1f59567e2504f0fbebd51ccf004b3ccb1d
wordpress	www.wordpress.org/news/2019/12/wordpress-5-3-1-security-and-maintenance-release/
blog	www.blog.ripstech.com/filter/vulnerabilities/
wpvulndb	www.wpvulndb.com/vulnerabilities/9975
cve	www.cve.org/CVERecord
nvd	www.nvd.nist.gov/vuln/detail/CVE-2019-20042
launchpad	www.launchpad.net/bugs/cve/CVE-2019-20042
security-tracker	www.security-tracker.debian.org/tracker/CVE-2019-20042

OS	OS Version	Architecture	Package	Package Version	Filename
ubuntu	18.04	noarch	wordpress	any	UNKNOWN
ubuntu	16.04	noarch	wordpress	any	UNKNOWN

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

27 Dec 2019 00:00Current

5.9Medium risk

Vulners AI Score5.9

CVSS24.3

CVSS36.1

EPSS0.002