Beveiligingsadvies

CVE-2020-11025

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2020-04-30 22:10:11

Laatst bijgewerkt 2024-08-04 11:21:14

Toegewezen door GitHub_M

CVSS-score 5.8

Status PUBLISHED

Beschrijving

In affected versions of WordPress, a cross-site scripting (XSS) vulnerability in the navigation section of Customizer allows JavaScript code to be executed. Exploitation requires an authenticated user. This has been patched in version 5.4.1, along with all the previously affected versions via a minor release (5.3.3, 5.2.6, 5.1.5, 5.0.9, 4.9.14, 4.8.13, 4.7.17, 4.6.18, 4.5.21, 4.4.22, 4.3.23, 4.2.27, 4.1.30, 4.0.30, 3.9.31, 3.8.33, 3.7.33).

← Alle CVE's bekijken Bekijk op cve.org ↗