CVE Database /
CVE-2018-17586
CVE · Medium
CVE-2018-17586 — WP Fastest Cache – WordPress Cache Plugin [wp-fastest-cache] < 0.8.8.6
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2018-17583, CVE-2018-17584, CVE-2018-17585, CVE-2018-17586
|
WP Fastest Cache – WordPress Cache Plugin [wp-fastest-cache] < 0.8.8.6 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
Medium
6.1
|
< 0.8.8.6
|
0.8.8.6 |
2018-10-09 |
—
|
CVE-2018-17583, CVE-2018-17584, CVE-2018-17585, CVE-2018-17586
WP Fastest Cache before version 0.8.8.6 contains a cross-site scripting vulnerability in the wpfc_save_exclude_pages action, where the rules[0][content] parameter fails to properly sanitize user input. An attacker could inject malicious scripts through this parameter to compromise user sessions or steal sensitive data. The vulnerability affects version 0.8.8.5 and earlier releases.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings