PT-2020-3601 · WordPress · Wordpress

Jason Medeiros

+2

·

Published

2020-04-30

·

Updated

2024-03-06

·

CVE-2020-11026

CVSS v3.1

8.7

High

VectorAV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N
Name of the Vulnerable Software and Affected Versions WordPress versions prior to 5.4.1 WordPress versions 5.3.3, 5.2.6, 5.1.5, 5.0.9, 4.9.14, 4.8.13, 4.7.17, 4.6.18, 4.5.21, 4.4.22, 4.3.23, 4.2.27, 4.1.30, 4.0.30, 3.9.31, 3.8.33, 3.7.33
Description In affected versions of WordPress, files with a specially crafted name when uploaded to the Media section can lead to script execution upon accessing the file. This requires an authenticated user with privileges to upload files. The vulnerability is related to insufficient protection measures in the formatting.php and SanitizeFileName.php components, which can allow a remote attacker to impact data integrity.
Recommendations For versions prior to 5.4.1, update to version 5.4.1 or later to resolve the issue. For versions 5.3.3, 5.2.6, 5.1.5, 5.0.9, 4.9.14, 4.8.13, 4.7.17, 4.6.18, 4.5.21, 4.4.22, 4.3.23, 4.2.27, 4.1.30, 4.0.30, 3.9.31, 3.8.33, 3.7.33, update to the respective minor release or later to resolve the issue. As a temporary workaround, consider restricting file uploads to trusted users until a patch is applied.

Fix

Improper Neutralization

XSS

Weakness Enumeration

Related Identifiers

BDU:2020-03936
BIT-WORDPRESS-2020-11026
BIT-WORDPRESS-MULTISITE-2020-11026
CVE-2020-11026
DLA-2208-1
DSA-4677-1
GHSA-3GW2-4656-PFR2

Affected Products

Wordpress