CVE-2020-28040 - log back

CVE-2020-28040 edited at 02 Nov 2020 07:53:09
References
https://blog.wpscan.com/2020/10/30/wordpress-5.5.2-security-release.html
+ https://github.com/WordPress/wordpress-develop/commit/69e832398254b7f47d137afaed40ff186015a71b
CVE-2020-28040 edited at 02 Nov 2020 07:48:34
Severity
- Unknown
+ High
Remote
- Unknown
+ Remote
Type
- Unknown
+ Cross-site request forgery
Description
+ WordPress before 5.5.2 allows CSRF attacks that change a theme's background image.
References
+ https://blog.wpscan.com/2020/10/30/wordpress-5.5.2-security-release.html
Notes
CVE-2020-28040 created at 02 Nov 2020 07:35:52