CVE-2018-17583 WP Fastest Cache <= 0.8.8.5 - Cross-Site Scripting via the rules[0][content] parameter in a wpfc_save_exclude_pages action
MediumCVSS 6.1
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The WP Fastest Cache plugin 0.8.8.5 for WordPress has XSS via the rules[0][content] parameter in a wpfc_save_exclude_pages action.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| wpfastestcache wp fastest cache | = 0.8.8.5 | No fix listed |
| wordpress wp-fastest-cache(WordPress) | < 0.8.8.6 | 0.8.8.6 |
References
- ansawaf.blogspot.com exploit third-party-advisory
- docs.google.com permissions-required third-party-advisory
- wpvulndb.com
- Wordfence Intelligence third-party-advisory
- www.cve.org