Skip to content
OpenAdvisories
Medium · 5.9 CVE-2025-48360 EUVD-2025-26019GHSA-fmm6-3494-qm57

WordPress Varnish/Nginx Proxy Caching plugin <= 1.8.3 - Cross Site Scripting (XSS) vulnerability

Published Aug 28, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Razvan Stanga Product: Varnish/Nginx Proxy Caching

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Razvan Stanga Varnish/Nginx Proxy Caching vcaching allows Stored XSS.This issue affects Varnish/Nginx Proxy Caching: from n/a through <= 1.8.3.

Affected products

VendorProductAffectedFixed
Razvan Stanga Varnish/Nginx Proxy Caching ≤ 1.8.3 —

References