Threats tagged 'ghsa-hm53-mjmf-w6v4'

Fastcache by Host.it WordPress plugin versions up to 1.7.4 contain a code injection vulnerability via the cache_cookie_exclude parameter. Authenticated administrators can inject arbitrary Apache directives into the .htaccess file, enabling server-level configuration changes and potential remote code execution. The vulnerability arises from improper sanitization of user input before writing to .htaccess.