Advisories · Technology
hostspa Fastcache by Host.it.
Every CVE that names hostspa Fastcache by Host.it among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 4.3 Medium
Fastcache by Host.it <= 1.7.5 - Missing Authorization to Authenticated (Subscriber+) Arbitrary .htaccess Page-Cache Block Modification via updateSettings() admin_action_update Hook
- hostspa Fastcache by Host.it
- Broken access control
- CVSS 7.2 High
Fastcache by Host.it <= 1.7.4 - Authenticated (Administrator+) Code Injection via .htaccess Directive Injection via 'cache_cookie_exclude' Setting
- hostspa Fastcache by Host.it
- Code injection