CVE-2020-28038
published 2020-11-02CVE-2020-28038: WordPress before 5.5.2 allows stored XSS via post slugs.
PriorityP430medium6.1CVSS 3.1
AVNACLPRNUIRSCCLILAN
EPSS
2.61%
83.7th percentile
WordPress before 5.5.2 allows stored XSS via post slugs.
Affected
12 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| debian | debian_linux | — | — |
| debian | debian_linux | — | — |
| debian | wordpress | < wordpress 5.5.3+dfsg1-1 (bookworm) | wordpress 5.5.3+dfsg1-1 (bookworm) |
| fedoraproject | fedora | — | — |
| fedoraproject | fedora | — | — |
| fedoraproject | fedora | — | — |
| linux | linux_kernel | >= 0 < 5.4.0-73.82 | 5.4.0-73.82 |
| wordpress | wordpress | < 5.5.2 | 5.5.2 |
| wordpress | wordpress | >= 0 < 5.5.3+dfsg1-1 | 5.5.3+dfsg1-1 |
| wordpress | wordpress | >= 0 < 5.5.3+dfsg1-1 | 5.5.3+dfsg1-1 |
| wordpress | wordpress | >= 0 < 5.5.3+dfsg1-1 | 5.5.3+dfsg1-1 |
| wordpress | wordpress | >= 0 < 5.5.3+dfsg1-1 | 5.5.3+dfsg1-1 |
CVSS provenance
nvdv3.16.1MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
nvdv2.04.3MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
osv6.1MEDIUM
vendor_debian6.1MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-mwxx-w555-5h5m: WordPress before 5
ghsa_unreviewed·2022-05-24
CVE-2020-28038 [MEDIUM] CWE-79 GHSA-mwxx-w555-5h5m: WordPress before 5
WordPress before 5.5.2 allows stored XSS via post slugs.
OSV
linux-raspi, linux-raspi-5.4 vulnerabilities
osv·2021-05-19·CVSS 4.4
linux-raspi, linux-raspi-5.4 vulnerabilities
linux-raspi, linux-raspi-5.4 vulnerabilities
USN-4945-1 fixed vulnerabilities in the Linux kernel for Ubuntu
20.04 LTS and Ubuntu 18.04 LTS. This update provides the corresponding
Linux kernel updates targeted specifically for Raspberry Pi devices
in those same Ubuntu Releases.
Original advisory details:
It was discovered that the Nouveau GPU driver in the Linux kernel did not
properly handle error conditions in some situations. A local attacker could
use this to cause a denial of service (system crash). (CVE-2020-25639)
Jan Beulich discovered that the Xen netback backend in the Linux kernel did
not properly handle certain error conditions under paravirtualization. An
attacker in a guest VM could possibly use this to cause a denial of service
(host domain crash). (CVE-2021-28038)
It w
OSV
linux, linux-aws, linux-aws-5.4, linux-azure, linux-azure-5.4, linux-gcp, linux-gcp-5.4, linux-gke, linux-gke-5.4, linux-gkeop, linux-gkeop-5.4, linux-hwe-5.4, linux-kvm, linux-oracle, linux-oracle-5.
osv·2021-05-11·CVSS 4.4
CVE-2020-25639 linux, linux-aws, linux-aws-5.4, linux-azure, linux-azure-5.4, linux-gcp, linux-gcp-5.4, linux-gke, linux-gke-5.4, linux-gkeop, linux-gkeop-5.4, linux-hwe-5.4, linux-kvm, linux-oracle, linux-oracle-5.
linux, linux-aws, linux-aws-5.4, linux-azure, linux-azure-5.4, linux-gcp, linux-gcp-5.4, linux-gke, linux-gke-5.4, linux-gkeop, linux-gkeop-5.4, linux-hwe-5.4, linux-kvm, linux-oracle, linux-oracle-5.4 vulnerabilities
It was discovered that the Nouveau GPU driver in the Linux kernel did not
properly handle error conditions in some situations. A local attacker could
use this to cause a denial of service (system crash). (CVE-2020-25639)
Jan Beulich discovered that the Xen netback backend in the Linux kernel did
not properly handle certain error conditions under paravirtualization. An
attacker in a guest VM could possibly use this to cause a denial of service
(host domain crash). (CVE-2021-28038)
It was discovered that the fastrpc driver in the Linux kernel did not
prevent user space appli
OSV
linux-oem-5.10 vulnerabilities
osv·2021-04-13·CVSS 4.4
CVE-2020-25639 linux-oem-5.10 vulnerabilities
linux-oem-5.10 vulnerabilities
It was discovered that the Nouveau GPU driver in the Linux kernel did not
properly handle error conditions in some situations. A local attacker could
use this to cause a denial of service (system crash). (CVE-2020-25639)
Jan Beulich discovered that the Xen netback backend in the Linux kernel did
not properly handle certain error conditions under paravirtualization. An
attacker in a guest VM could possibly use this to cause a denial of service
(host domain crash). (CVE-2021-28038)
It was discovered that the fastrpc driver in the Linux kernel did not
prevent user space applications from sending kernel RPC messages. A local
attacker could possibly use this to gain elevated privileges.
(CVE-2021-28375)
It was discovered that the fuse user space file system im
OSV
CVE-2020-28038: WordPress before 5
osv·2020-11-02·CVSS 6.1
CVE-2020-28038 [MEDIUM] CVE-2020-28038: WordPress before 5
WordPress before 5.5.2 allows stored XSS via post slugs.
Debian
CVE-2020-28038: wordpress - WordPress before 5.5.2 allows stored XSS via post slugs.
vendor_debian·2020·CVSS 6.1
CVE-2020-28038 [MEDIUM] CVE-2020-28038: wordpress - WordPress before 5.5.2 allows stored XSS via post slugs.
WordPress before 5.5.2 allows stored XSS via post slugs.
Scope: local
bookworm: resolved (fixed in 5.5.3+dfsg1-1)
bullseye: resolved (fixed in 5.5.3+dfsg1-1)
forky: resolved (fixed in 5.5.3+dfsg1-1)
sid: resolved (fixed in 5.5.3+dfsg1-1)
trixie: resolved (fixed in 5.5.3+dfsg1-1)
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2020-28038 wordpress: stored XSS in post slugs [fedora-all]
bugzilla·2020-11-05·CVSS 6.1
CVE-2020-28038 [MEDIUM] CVE-2020-28038 wordpress: stored XSS in post slugs [fedora-all]
CVE-2020-28038 wordpress: stored XSS in post slugs [fedora-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of fedora-all.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects multiple supported versions of Fedora. Wh
Bugzilla
CVE-2020-28038 wordpress: stored XSS in post slugs [epel-all]
bugzilla·2020-11-05·CVSS 6.1
CVE-2020-28038 [MEDIUM] CVE-2020-28038 wordpress: stored XSS in post slugs [epel-all]
CVE-2020-28038 wordpress: stored XSS in post slugs [epel-all]
This is an automatically created tracking bug! It was created to ensure
that one or more security vulnerabilities are fixed in affected versions
of epel-all.
For comments that are specific to the vulnerability please use bugs filed
against the "Security Response" product referenced in the "Blocks" field.
For more information see:
http://fedoraproject.org/wiki/Security/TrackingBugs
When submitting as an update, use the fedpkg template provided in the next
comment(s). This will include the bug IDs of this tracking bug as well as
the relevant top-level CVE bugs.
Please also mention the CVE IDs being fixed in the RPM changelog and the
fedpkg commit message.
NOTE: this issue affects multiple supported versions of Fedora EPEL. W
Bugzilla
CVE-2020-28038 wordpress: stored XSS in post slugs
bugzilla·2020-11-05·CVSS 6.1
CVE-2020-28038 [MEDIUM] CVE-2020-28038 wordpress: stored XSS in post slugs
CVE-2020-28038 wordpress: stored XSS in post slugs
WordPress before 5.5.2 allows stored XSS via post slugs.
Reference:
https://wordpress.org/news/2020/10/wordpress-5-5-2-security-and-maintenance-release/
Discussion:
Created wordpress tracking bugs for this issue:
Affects: epel-all [bug 1894976]
Affects: fedora-all [bug 1894975]
---
This CVE Bugzilla entry is for community support informational purposes only as it does not affect a package in a commercially supported Red Hat product. Refer to the dependent bugs for status of those individual community products.
https://blog.ripstech.comhttps://lists.debian.org/debian-lts-announce/2020/11/msg00004.htmlhttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CHHVNK2WYAM3ZTCXTFSEIT56IKLVJHU3/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VAVVYJKA2I6CRQUINECDPBGWMQDEG244/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUXVUAKL2HL4QYJEPHBNVQQWRMFMII2Y/https://wordpress.org/news/2020/10/wordpress-5-5-2-security-and-maintenance-release/https://www.debian.org/security/2020/dsa-4784https://blog.ripstech.comhttps://lists.debian.org/debian-lts-announce/2020/11/msg00004.htmlhttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/CHHVNK2WYAM3ZTCXTFSEIT56IKLVJHU3/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VAVVYJKA2I6CRQUINECDPBGWMQDEG244/https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUXVUAKL2HL4QYJEPHBNVQQWRMFMII2Y/https://wordpress.org/news/2020/10/wordpress-5-5-2-security-and-maintenance-release/https://www.debian.org/security/2020/dsa-4784
2020-11-02
Published