Description
IIS does not properly canonicalize URLs, potentially allowing remote attackers to bypass access restrictions in third-party software via escape characters, aka the "Escape Character Parsing" vulnerability.
Remediation
References
Related Vulnerabilities
MySQL CVE-2020-14643 Vulnerability (CVE-2020-14643)
WordPress Plugin CardGate Payments for WooCommerce Security Bypass (3.1.15)
WordPress Plugin Events Manager Multiple Cross-Site Scripting Vulnerabilities (5.3.3)
WordPress Plugin Simplelife Cross-Site Request Forgery (1.2)
WordPress Plugin WP-Live Chat by 3CX Cross-Site Scripting (8.0.07)