Lucene search
+L

320 matches found

CVE
CVE
•added 2026/10/29 9:25 a.m.•6 views

CVE-2026-116763 LiteSpeed Cache <= 7.9.1 - Unauthenticated Stored Cross-Site Scripting via HTML Minifier Predictable Placeholder (md5(REQUEST_TIME) + two-pass str_replace)

The LiteSpeed Cache plugin for WordPress (versions up to and including 7.9.1 ) is vulnerable to Stored Cross-Site Scripting (XSS) via the 'comment' parameter . The root cause is insufficient input sanitization and output escaping. This vulnerability is specifically exploitable when the HTML Minif...

5.4CVSS6.1AI score
SaveExploits0References7
Rows per page
Query Builder