CVE-2019-20042

Name of the Vulnerable Software and Affected Versions WordPress versions 3.7 through 5.3.0

Description The issue is related to the wp targeted link rel() function in WordPress, which can be exploited to result in a stored cross-site scripting (XSS) vulnerability. This vulnerability can be used by a remote attacker to impact data integrity. The vulnerability has been patched in WordPress 5.3.1 and all previous versions from 3.7 to 5.3 via a minor release.

Recommendations For WordPress versions 3.7 through 5.3.0, update to WordPress 5.3.1 or a later version to resolve the issue. As a temporary workaround, consider disabling the wp targeted link rel() function until a patch is available.