Bug 1793668 (CVE-2019-16781)

Summary:	CVE-2019-16781 wordpress: XSS in WordPress block editor (within dashboard)
Product:	[Other] Security Response	Reporter:	Guilherme de Almeida Suckevicz <gsuckevi>
Component:	vulnerability	Assignee:	Red Hat Product Security <security-response-team>
Status:	CLOSED NOTABUG	QA Contact:
Severity:	medium	Docs Contact:
Priority:	medium
Version:	unspecified	CC:	fedora, kevin
Target Milestone:	---	Keywords:	Security
Target Release:	---
Hardware:	All
OS:	Linux
Whiteboard:
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2021-10-28 05:23:27 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	1793669, 1793670
Bug Blocks:

Description Guilherme de Almeida Suckevicz 2020-01-21 19:00:06 UTC

In WordPress before 5.3.1, authenticated users with lower privileges (like contributors) can inject JavaScript code in the block editor, which is executed within the dashboard. It can lead to an admin opening the affected post in the editor leading to XSS.

Reference:
https://github.com/WordPress/wordpress-develop/security/advisories/GHSA-pg4x-64rh-3c9v

Comment 1 Guilherme de Almeida Suckevicz 2020-01-21 19:00:26 UTC

Created wordpress tracking bugs for this issue:

Affects: epel-6 [bug 1793669]
Affects: epel-7 [bug 1793670]