PT-2026-57630 · WordPress · Breeze Cache
CVSS v3.1
6.1
Medium
| Vector | AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
Breeze Cache WordPress plugin versions prior to 2.5.6
Description
An unauthenticated Stored Cross-Site Scripting (XSS) issue exists due to a predictable replacement hash used during the HTML minification process and the abuse of a regular expression. This allows an attacker to inject arbitrary HTML attributes into the final HTML output by anticipating the placeholder format.
Recommendations
Update Breeze Cache WordPress plugin to version 2.5.6 or later.
Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Breeze Cache