CVE-2020-4047: Authenticated XSS via media attachment page in WordPress
In affected versions of WordPress, authenticated users with upload permissions (like authors) are able to inject JavaScript into some media file attachment pages in a certain way. This can lead to script execution in the context of a higher privileged user when the file is viewed by them. This has been patched in version 5.4.2, along with all the previously affected versions via a minor release (5.3.4, 5.2.7, 5.1.6, 5.0.10, 4.9.15, 4.8.14, 4.7.18, 4.6.19, 4.5.22, 4.4.23, 4.3.24, 4.2.28, 4.1.31, 4.0.31, 3.9.32, 3.8.34, 3.7.34).
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the vulnerability CVE-2020-4047?
The vulnerability CVE-2020-4047 allows authenticated users with upload permissions to inject JavaScript into media file attachment pages, leading to script execution in the context of a higher privileged user.
What software versions are affected by CVE-2020-4047?
WordPress versions 3.7 to 5.0.15, 5.0.19 to 5.7.8, 6.1.1 to 6.3.1, and some Debian and Fedoraproject versions are affected by CVE-2020-4047.
How severe is the vulnerability CVE-2020-4047?
The severity of the vulnerability CVE-2020-4047 is medium with a CVSS score of 6.8.
How can I fix the vulnerability CVE-2020-4047?
To fix the vulnerability CVE-2020-4047, update your WordPress installation to a version that includes the security patch.
Where can I find more information about the vulnerability CVE-2020-4047?
You can find more information about the vulnerability CVE-2020-4047 on the WordPress Core Trac and GitHub security advisories.