wplib-box icon indicating copy to clipboard operation
wplib-box copied to clipboard

Published 20 hours ago • verified publisher icon wplib

[Bug reporting] XSS vulnerabilty in wp_kses_bad_protocol in wp-includes/kses.php (CVE-2019-20041)

Open seongil-wi opened this issue 3 years ago • 0 comments

Hi

I found a known XSS vulnerability in the recent version of wplib-box. In particular, the bug we report is a known bug by CVE-2019-20041.

wp_kses_bad_protocol in wp-includes/kses.php in WordPress before 5.3.1 mishandles the HTML5 colon named entity, allowing attackers to bypass input sanitization, as demonstrated by the javascript: substring.

Please check this line: https://github.com/wplib/wplib-box/blob/bf595c731424e0574f54cdc381e6329acde0a4fd/www/wp-includes/kses.php#L1325

Thanks!

seongil-wi avatar Sep 11 '21 15:09 seongil-wi