Description

wp_kses_bad_protocol in wp-includes/kses.php in WordPress before 5.3.1 mishandles the HTML5 colon named entity, allowing attackers to bypass input sanitization, as demonstrated by the javascript: substring.

Remediation

References

CVE-2019-20041

Related Vulnerabilities

WordPress Plugin AddToAny Share Buttons Cross-Site Scripting (1.7.47)

Liferay Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Vulnerability (CVE-2020-13445)

MySQL CVE-2019-2482 Vulnerability (CVE-2019-2482)

MySQL CVE-2021-2178 Vulnerability (CVE-2021-2178)

Dot CMS Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2019-12309)

Severity

Critical

Classification

CVE-2019-20041 CWE-20 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities