CVE-2021-24964 LiteSpeed Cache < 4.4.4 - IP Check Bypass to Unauthenticated Stored XSS

2022-01-0312:49:08

CWE-79

WPScan

www.cve.org

litespeed cache

unauthenticated

xss

wordpress

security vulnerability

EPSS

0.002

Percentile

55.2%

JSON

The LiteSpeed Cache WordPress plugin before 4.4.4 does not properly verify that requests are coming from QUIC.cloud servers, allowing attackers to make requests to certain endpoints by using a specific X-Forwarded-For header value. In addition, one of the endpoint could be used to set CSS code if a setting is enabled, which will then be output in some pages without being sanitised and escaped. Combining those two issues, an unauthenticated attacker could put Cross-Site Scripting payloads in pages visited by users.

CNA Affected

[
  {
    "product": "LiteSpeed Cache",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThan": "4.4.4",
        "status": "affected",
        "version": "4.4.4",
        "versionType": "custom"
      }
    ]
  }
]

References

wpscan.com/vulnerability/e9966b3e-2eb9-4d70-8c18-6a829b4827cc

EPSS

0.002

Percentile

55.2%

JSON

Related for CVELIST:CVE-2021-24964