CVE-2015-10094
Low
Description
A vulnerability was found in Fastly Plugin up to 0.97 on WordPress. It has been rated as problematic. Affected by this issue is the function post of the file lib/api.php. The manipulation of the argument url leads to cross site scripting. The attack may be launched remotely. Upgrading to version 0.98 is able to address this issue. The patch is identified as d7fe42538f4d4af500e3af9678b6b06fba731656. It is recommended to upgrade the affected component. VDB-222326 is the identifier assigned to this vulnerability.
SeverityLow
CVSS2.4
Exploit probability—
Product
Fastly
FastlyPublishedMar 6, 2023
First seenMar 6, 2023
Weakness typeCWE-79Cross-site scripting (XSS)
How to fix
Update
- fastly fastly0.98 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| fastly fastly | v < 0.98 | 0.98 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.