PT-2020-17105

Name of the Vulnerable Software and Affected Versions LiteSpeed Cache plugin versions prior to 3.6.1 Description A cross-site scripting XSS issue exists in the LiteSpeed Cache plugin for WordPress, which can be exploited via the Server IP setting. Recommendations For versions prior to 3.6.1, upda...

LiteSpeed Cache < 3.6.1 - Authenticated Stored Cross-Site Scripting

The plugin does not sanitise invalid IPs given in its Toolbox page before displaying them in an error message. Submit a payload such as in the Admin IPs section of the Toolbox /wp-admin/admin.php?page=litespeed-toolbox...

CVE-2020-29172: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in the LiteSpeed Cache plugin before 3.6.1 for WordPress can be exploited via the Server IP setting...

Wordpress LiteSpeed Cache Plugin Cross-Site Scripting Vulnerability

Wordpress LiteSpeed Cache Plugin is a Wordpress Foundation plugin that provides site caching functionality for Wordpress sites. The plugin supports object caching, minimizing static files, asynchronous loading, automatic cache clearing and other features. A cross-site scripting vulnerability exis...