Lucene search

K
patchstackWordFencePATCHSTACK:138E6E6C2E16AD2AB9E33CB686332E2D
HistorySep 25, 2024 - 12:00 a.m.

WordPress LiteSpeed Cache Plugin <= 6.4.1 is vulnerable to Cross Site Scripting (XSS)

2024-09-2500:00:00
WordFence
patchstack.com
2
wordpress litespeed cache plugin
cross site scripting
vulnerability
version 6.4.1
low severity

CVSS3

5.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N

AI Score

5.8

Confidence

High

Software

LiteSpeed Cache

Type

Plugin

Vulnerable versions

<= 6.4.1

Fixed in

6.5

OWASP Top 10

A7: Cross-Site Scripting (XSS)

Classification

Cross Site Scripting (XSS)

CVE

CVE-2024-9169

Patch priority

Low

CVSS severity

Low (5.9)

Developer

Hai Zheng / Lite Speed Cache

PSID

86505b2e63f8

Credits

WordFence

Required privilege

Administrator

Published

25 September, 2024

Vulnerability details

Remove and replace plugin Expand full details Have additional information or questions about this entry? Let us know.

Solution

This security issue has a low severity impact and is unlikely to be exploited.

Affected configurations

Vulners
Node
litespeed_technologieslitespeed_web_serverRange6.4.1
VendorProductVersionCPE
litespeed_technologieslitespeed_web_server*cpe:2.3:a:litespeed_technologies:litespeed_web_server:*:*:*:*:*:*:*:*

CVSS3

5.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:N

AI Score

5.8

Confidence

High

Related for PATCHSTACK:138E6E6C2E16AD2AB9E33CB686332E2D