Lucene search
WpvulndbWPVDB-ID:741D07D1-2476-430A-B82F-E1228A9343A4HistoryJun 11, 2020 - 12:00 a.m.
WordPress < 5.4.2 - Authenticated XSS via Media Files
2020-06-1100:00:00
wpscan.com
18
0.001 Low
EPSS
Percentile
43.5%
Props to Luigi – (gubello.me) for discovering an XSS issue where authenticated users with upload permissions are able to add JavaScript to media files.
Related
redhatcve
redhatcve
CVE-2020-4047
2022-05-20 23:28:21
cvelist
cvelist
CVE-2020-4047 Authenticated XSS via media attachment page in WordPress
2020-06-12 16:00:36
ubuntucve
ubuntucve
CVE-2020-4047
2020-06-12 00:00:00
debiancve
debiancve
CVE-2020-4047
2020-06-12 16:15:10
veracode
veracode
Remote Code Execution (RCE)
2020-06-15 03:53:52
prion
prion
Design/Logic Flaw
2020-06-12 16:15:00
osv
osv
CVE-2020-4047
2020-06-12 16:15:10
BIT-wordpress-2020-4047
2024-03-06 11:11:09
BIT-wordpress-multisite-2020-4047
2024-03-06 11:10:57
nvd
nvd
CVE-2020-4047
2020-06-12 16:15:10
cve
cve
CVE-2020-4047
2020-06-12 16:15:10
nessus
nessus
Debian DSA-4709-1 : wordpress - security update
2020-06-24 00:00:00
Fedora 32 : wordpress (2020-8447a3e195)
2020-06-23 00:00:00
Debian DLA-2269-1 : wordpress security update
2020-07-02 00:00:00
debian
debian
[SECURITY] [DSA 4709-1] wordpress security update
2020-06-23 14:17:52
[SECURITY] [DLA 2269-1] wordpress security update
2020-07-01 12:23:57
[SECURITY] [DSA 4709-1] wordpress security update
2020-06-23 14:17:52
openvas
openvas
WordPress Multiple Vulnerabilities (Jun 2020) - Windows
2020-06-15 00:00:00
Debian: Security Advisory (DLA-2269-1)
2020-07-02 00:00:00
WordPress Multiple Vulnerabilities (Jun 2020) - Linux
2020-06-15 00:00:00
fedora
fedora
[SECURITY] Fedora 32 Update: wordpress-5.4.2-1.fc32
2020-06-23 01:22:34
[SECURITY] Fedora 31 Update: wordpress-5.4.2-1.fc31
2020-06-23 01:14:21