WordPress <= 5.3 - Authenticated Stored XSS via Crafted Links

🗓️ 13 Dec 2019 00:00:00Reported by wpvulndbType

WordPress 5.3 Authenticated Stored XS

Reporter	Title	Published	Views	Family All 24
RedhatCVE	CVE-2019-20042	20 May 202223:52	–	redhatcve
Symantec	WordPress CVE-2019-20042 HTML Injection Vulnerability	27 Dec 201900:00	–	symantec
Cvelist	CVE-2019-20042	27 Dec 201907:14	–	cvelist
Veracode	Cross-Site Scripting (XSS)	30 Dec 201904:18	–	veracode
UbuntuCve	CVE-2019-20042	27 Dec 201900:00	–	ubuntucve
Prion	Cross site scripting	27 Dec 201908:15	–	prion
wpexploit	WordPress <= 5.3 - Authenticated Stored XSS via Crafted Links	13 Dec 201900:00	–	wpexploit
Debian CVE	CVE-2019-20042	27 Dec 201908:15	–	debiancve
Tenable Nessus	WordPress < 5.3.1	18 Dec 201900:00	–	nessus
Tenable Nessus	Debian DSA-4599-1 : wordpress - security update	9 Jan 202000:00	–	nessus

Source	Link
wordpress	www.wordpress.org/news/2019/12/wordpress-5-3-1-security-and-maintenance-release/
hackerone	www.hackerone.com/reports/509930
github	www.github.com/WordPress/wordpress-develop/commit/1f7f3f1f59567e2504f0fbebd51ccf004b3ccb1d
github	www.github.com/WordPress/wordpress-develop/security/advisories/GHSA-xvg2-m2f4-83m7

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

13 Dec 2019 00:00Current

6.8Medium risk

Vulners AI Score6.8

CVSS36.1

EPSS0.002