PT-2026-27909 · WordPress · Acato Wp Rest Cache
CVE-2026-25347
·
Publicado
2026-03-25
·
Atualizado
2026-03-30
CVSS v3.1
7.1
Alta
| Vetor | AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L |
Name of the Vulnerable Software and Affected Versions
Acato WP REST Cache versions through 2026.1.0
Description
The software contains a flaw due to improper handling of user-supplied data during the creation of web pages, leading to a potential 'cross-site scripting' issue. This allows for the injection of malicious scripts that are stored and can be executed when other users access the affected pages. The vulnerability exists in the wp-rest-cache component.
Recommendations
Update Acato WP REST Cache to a version later than 2026.1.0.
Correção
XSS
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Acato Wp Rest Cache