LiteSpeed Cache < 3.6.1 - Authenticated Stored Cross-Site Scripting

The plugin does not sanitise invalid IPs given in its Toolbox page before displaying them in an error message. PoC Submit a payload such as in the Admin IPs section of the Toolbox /wp-admin/admin.php?page=litespeed-toolbox...

Wordpress LiteSpeed Cache Plugin Cross-Site Scripting Vulnerability

Wordpress LiteSpeed Cache Plugin is a Wordpress Foundation plugin that provides site caching functionality for Wordpress sites. The plugin supports object caching, minimizing static files, asynchronous loading, automatic cache clearing and other features. A cross-site scripting vulnerability exis...