320 matches found
CVE-2026-116763 LiteSpeed Cache <= 7.9.1 - Unauthenticated Stored Cross-Site Scripting via HTML Minifier Predictable Placeholder (md5(REQUEST_TIME) + two-pass str_replace)
The LiteSpeed Cache plugin for WordPress (versions up to and including 7.9.1 ) is vulnerable to Stored Cross-Site Scripting (XSS) via the 'comment' parameter . The root cause is insufficient input sanitization and output escaping. This vulnerability is specifically exploitable when the HTML Minif...
5.4CVSS6.1AI score
SaveExploits0References7
20