project-open-data/csv-to-api

[Bug reporting] XSS vulnerabilty in wp_kses_bad_protocol in wp-includes/kses.php (CVE-2019-20041)

seongil-wi opened this issue · 1 comments

seongil-wi commented

Hi

I found a known XSS vulnerability in the recent version of csv-to-api.
In particular, the bug we report is a known bug by CVE-2019-20041.

wp_kses_bad_protocol in wp-includes/kses.php in WordPress before 5.3.1 mishandles the HTML5 colon named entity, allowing attackers to bypass input sanitization, as demonstrated by the javascript: substring.

Please check this line:

csv-to-api/class.csv-to-api.php

Line 825 in e275037

$string2 = preg_split( '/:|&#0*58;|&#x0*3a;/i', $string, 2 );

Thanks!

jbrown-xentity commented

This repository is no longer in use. This issue can be considered closed.