PT-2020-3601 · WordPress · Wordpress
Jason Medeiros
+2
·
Published
2020-04-30
·
Updated
2024-03-06
·
CVE-2020-11026
CVSS v3.1
8.7
High
| Vector | AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N |
Name of the Vulnerable Software and Affected Versions
WordPress versions prior to 5.4.1
WordPress versions 5.3.3, 5.2.6, 5.1.5, 5.0.9, 4.9.14, 4.8.13, 4.7.17, 4.6.18, 4.5.21, 4.4.22, 4.3.23, 4.2.27, 4.1.30, 4.0.30, 3.9.31, 3.8.33, 3.7.33
Description
In affected versions of WordPress, files with a specially crafted name when uploaded to the Media section can lead to script execution upon accessing the file. This requires an authenticated user with privileges to upload files. The vulnerability is related to insufficient protection measures in the
formatting.php and SanitizeFileName.php components, which can allow a remote attacker to impact data integrity.Recommendations
For versions prior to 5.4.1, update to version 5.4.1 or later to resolve the issue.
For versions 5.3.3, 5.2.6, 5.1.5, 5.0.9, 4.9.14, 4.8.13, 4.7.17, 4.6.18, 4.5.21, 4.4.22, 4.3.23, 4.2.27, 4.1.30, 4.0.30, 3.9.31, 3.8.33, 3.7.33, update to the respective minor release or later to resolve the issue.
As a temporary workaround, consider restricting file uploads to trusted users until a patch is applied.
Fix
Improper Neutralization
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Wordpress