CVE-2020-11029 - Cross-site scripting in stats method (object cache) in WordPress

Back Back to CVE browser

MEDIUM

Cross-site scripting in stats method (object cache) in WordPress

Published Apr 30, 2020

6.1

MEDIUM

CVSS 3.1

EPSS 2.14%

Description

In affected versions of WordPress, a vulnerability in the stats() method of class-wp-object-cache.php can be exploited to execute cross-site scripting (XSS) attacks. This has been patched in version 5.4.1, along with all the previously affected versions via a minor release (5.3.3, 5.2.6, 5.1.5, 5.0.9, 4.9.14, 4.8.13, 4.7.17, 4.6.18, 4.5.21, 4.4.22, 4.3.23, 4.2.27, 4.1.30, 4.0.30, 3.9.31, 3.8.33, 3.7.33).

Affected products

Vendor WordPress Product WordPress Default
n/a
- Version
  >= 3.7.0, < 3.7.33
  Status
  affected
  Constraints
  -
- Version
  >= 3.8.0, < 3.8.33
  Status
  affected
  Constraints
  -
- Version
  >= 3.9.0, < 3.9.31
  Status
  affected
  Constraints
  -
- Version
  >= 4.0.0, < 4.0.30
  Status
  affected
  Constraints
  -
- Version
  >= 4.1.0, < 4.1.30
  Status
  affected
  Constraints
  -
- Version
  >= 4.2.0, < 4.2.27
  Status
  affected
  Constraints
  -
- Version
  >= 4.3.0, < 4.3.23
  Status
  affected
  Constraints
  -
- Version
  >= 4.4.0, < 4.4.22
  Status
  affected
  Constraints
  -
- Version
  >= 4.5.0, < 4.5.21
  Status
  affected
  Constraints
  -
- Version
  >= 4.6.0, < 4.6.18
  Status
  affected
  Constraints
  -
- Version
  >= 4.7.0, < 4.7.17
  Status
  affected
  Constraints
  -
- Version
  >= 4.8.0, < 4.8.13
  Status
  affected
  Constraints
  -
- Version
  >= 4.9.0, < 4.9.14
  Status
  affected
  Constraints
  -
- Version
  >= 5.0.0, < 5.0.9
  Status
  affected
  Constraints
  -
- Version
  >= 5.1.0, < 5.1.5
  Status
  affected
  Constraints
  -
- Version
  >= 5.2.0, < 5.2.6
  Status
  affected
  Constraints
  -
- Version
  >= 5.3.0, < 5.3.3
  Status
  affected
  Constraints
  -
- Version
  >= 5.4.0, < 5.4.1
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

WordPress

n/a

Version	Status	Constraints
>= 3.7.0, < 3.7.33	affected	-
>= 3.8.0, < 3.8.33	affected	-
>= 3.9.0, < 3.9.31	affected	-
>= 4.0.0, < 4.0.30	affected	-
>= 4.1.0, < 4.1.30	affected	-
>= 4.2.0, < 4.2.27	affected	-
>= 4.3.0, < 4.3.23	affected	-
>= 4.4.0, < 4.4.22	affected	-
>= 4.5.0, < 4.5.21	affected	-
>= 4.6.0, < 4.6.18	affected	-
>= 4.7.0, < 4.7.17	affected	-
>= 4.8.0, < 4.8.13	affected	-
>= 4.9.0, < 4.9.14	affected	-
>= 5.0.0, < 5.0.9	affected	-
>= 5.1.0, < 5.1.5	affected	-
>= 5.2.0, < 5.2.6	affected	-
>= 5.3.0, < 5.3.3	affected	-
>= 5.4.0, < 5.4.1	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (4)

https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-568w-8m88-8g2c
x_refsource_CONFIRMThird Party Advisory
https://lists.debian.org/debian-lts-announce/2020/05/msg00011.html
mailing-listx_refsource_MLISTMailing ListThird Party Advisory
https://wordpress.org/support/wordpress-version/version-5-4-1/#security-updates
x_refsource_MISCRelease NotesVendor Advisory
https://www.debian.org/security/2020/dsa-4677
vendor-advisoryx_refsource_DEBIANThird Party Advisory

Link	Providers	Tags
https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-568w-8m88-8g2c		x_refsource_CONFIRMThird Party Advisory
https://lists.debian.org/debian-lts-announce/2020/05/msg00011.html		mailing-listx_refsource_MLISTMailing ListThird Party Advisory
https://wordpress.org/support/wordpress-version/version-5-4-1/#security-updates		x_refsource_MISCRelease NotesVendor Advisory
https://www.debian.org/security/2020/dsa-4677		vendor-advisoryx_refsource_DEBIANThird Party Advisory