CVE-2015-10094

MEDIO 6.1CVE-2015-10094 · Published 06/03/2023 · updated 17/06/2026

En resumen

CVE-2015-10094 es una vulnerabilidad MEDIO (CVSS 6.1) que afecta a fastly (fastly).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.55%, mayor que el 45.9% de las vulnerabilidades.
Solución: actualizar a 0.98 o posterior.

Package	Affected versions	Patched versions
fastly fastly	`< 0.98`	`0.98`

Description

A vulnerability was found in Fastly Plugin up to 0.97 on WordPress. It has been rated as problematic. Affected by this issue is the function post of the file lib/api.php. The manipulation of the argument url leads to cross site scripting. The attack may be launched remotely. Upgrading to version 0.98 is able to address this issue. The patch is identified as d7fe42538f4d4af500e3af9678b6b06fba731656. It is recommended to upgrade the affected component. VDB-222326 is the identifier assigned to this vulnerability.

References

wp-plugins/fastly commit d7fe425 · Patch
wp-plugins/fastly release 0.98 · Release Notes
vuldb.com · Permissions Required
vuldb.com · Third Party Advisory

Más vulnerabilidades de fastly

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free