CVE-2015-10094

Published: Mar 6, 2023Modified: Nov 21, 2024

6.1

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Exploitability: 2.8 / Impact: 2.7

Source: NVD

Description

A vulnerability was found in Fastly Plugin up to 0.97 on WordPress. It has been rated as problematic. Affected by this issue is the function post of the file lib/api.php. The manipulation of the argument url leads to cross site scripting. The attack may be launched remotely. Upgrading to version 0.98 is able to address this issue. The patch is identified as d7fe42538f4d4af500e3af9678b6b06fba731656. It is recommended to upgrade the affected component. VDB-222326 is the identifier assigned to this vulnerability.

Affected (1)

Products: Fastly: Fastly

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Fastly Fastly	Before 0.98

Related CWEs

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.

References (8)

https://github.com/wp-plugins/fastly/commit/d7fe42538f4d4af500e3af9678b6b06fba731656

Source: cna@vuldb.com

Patch

https://github.com/wp-plugins/fastly/releases/tag/0.98

Source: cna@vuldb.com

Release Notes

https://vuldb.com/?ctiid.222326

Source: cna@vuldb.com

Permissions RequiredThird Party Advisory

https://vuldb.com/?id.222326

Source: cna@vuldb.com

Third Party Advisory

https://github.com/wp-plugins/fastly/commit/d7fe42538f4d4af500e3af9678b6b06fba731656

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

https://github.com/wp-plugins/fastly/releases/tag/0.98

Source: af854a3a-2127-422b-91ae-364da2661108

Release Notes

https://vuldb.com/?ctiid.222326

Source: af854a3a-2127-422b-91ae-364da2661108

Permissions RequiredThird Party Advisory

https://vuldb.com/?id.222326

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.