CVE-2015-10094: Fastly Plugin api.php post cross site scripting
A vulnerability was found in Fastly Plugin up to 0.97 on WordPress. It has been rated as problematic. Affected by this issue is the function post of the file lib/api.php. The manipulation of the argument url leads to cross site scripting. The attack may be launched remotely. Upgrading to version 0.98 is able to address this issue. The patch is identified as d7fe42538f4d4af500e3af9678b6b06fba731656. It is recommended to upgrade the affected component. VDB-222326 is the identifier assigned to this vulnerability.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2015-10094?
CVE-2015-10094 has been rated as problematic due to its potential for cross-site scripting attacks.
How do I fix CVE-2015-10094?
To fix CVE-2015-10094, upgrade the Fastly Plugin to version 0.98 or later.
Which versions of the Fastly Plugin are affected by CVE-2015-10094?
CVE-2015-10094 affects the Fastly Plugin versions up to 0.97.
What type of vulnerability is CVE-2015-10094?
CVE-2015-10094 is a cross-site scripting (XSS) vulnerability that can be exploited remotely.
Where in the code does CVE-2015-10094 occur?
CVE-2015-10094 specifically affects the function post in the file lib/api.php.