CVE-2019-20042

In wp-includes/formatting.php in WordPress 3.7 to 5.3.0, the function wp_targeted_link_rel() can be used in a particular way to result in a stored cross-site…

published December 27, 2019

CVSS
—
EPSS
3%
Percentile
86.2
In the wild
Unconfirmed
What it is

In wp-includes/formatting.php in WordPress 3.7 to 5.3.0, the function wp_targeted_link_rel() can be used in a particular way to result in a stored cross-site scripting (XSS) vulnerability. This has been patched in WordPress 5.3.1, along with all the previous WordPress versions from 3.7 to 5.3 via a minor release.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02762 · 86.2th percentile
Published
2019-12-27T07:14Z
EPSS history
Timeline
  • 27 DEC 07:14Z
    In wp-includes/formatting.php in WordPress 3.7 to 5.3.0, the function wp_targeted_link_rel() can be used in a particular way to result in a stored cross-site…
    cvelistv5