PT-2019-5212

CVE-2019-16222

Publicado

2019-09-11

Atualizado

2023-01-31

Descrição por

CVSS 3.1

6.1

Média

MétricasAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions WordPress versions prior to 5.2.3

Description The issue is related to incorrect URL sanitization in the wp kses bad protocol once function, which can lead to cross-site scripting (XSS) attacks. This could allow a remote attacker to compromise data integrity.

Recommendations For WordPress versions prior to 5.2.3, update to version 5.2.3 or later to resolve the issue. As a temporary workaround, consider restricting access to potentially vulnerable URL endpoints until the update is applied.

Explorabilidade

Exploit

Correção

Impactos

Pesquisadores

Irsdl

Soroush Dalili

Fornecedores

Produtos afetados

Enumeração de fraquezas

CWE-79: Improper Neutralization of Input During Web Page Generation (\'Cross-site Scripting\')

Identificadores relacionados