First published: Sat Oct 31 2020(Updated: )
WordPress before 5.5.2 allows stored XSS via post slugs.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
debian/wordpress | 5.0.15+dfsg1-0+deb10u1 5.0.19+dfsg1-0+deb10u1 5.7.8+dfsg1-0+deb11u2 6.1.1+dfsg1-1 6.3.1+dfsg1-1 | |
WordPress WordPress | <5.5.2 | |
Fedoraproject Fedora | =31 | |
Fedoraproject Fedora | =32 | |
Fedoraproject Fedora | =33 | |
Debian Debian Linux | =9.0 | |
Debian Debian Linux | =10.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The vulnerability ID for this WordPress vulnerability is CVE-2020-28038.
The title of this vulnerability is 'WordPress before 5.5.2 allows stored XSS via post slugs.'
The severity rating of CVE-2020-28038 is medium with a value of 6.1.
This vulnerability affects WordPress versions before 5.5.2.
To fix CVE-2020-28038, you should update your WordPress installation to version 5.5.2 or higher.