Hosts vulnerable to CVE-2019-20041

CVE-2019-20041 — severity critical, CVSS 9.8 — 2 affected hosts indexed by QROS Explore.

About CVE-2019-20041

wp_kses_bad_protocol in wp-includes/kses.php in WordPress before 5.3.1 mishandles the HTML5 colon named entity, allowing attackers to bypass input sanitization, as demonstrated by the javascript: substring.

Showing 2 of 2 hosts, ranked by risk score.

Search all CVE-2019-20041 hosts in Explore

Open in Explore →