578 matches found
PT-2024-13209 · Litespeed Technologies · Litespeed Cache
Name of the Vulnerable Software and Affected Versions: LiteSpeed Cache versions n/a through 5.7 Description: The issue is related to a Missing Authorization vulnerability in LiteSpeed Technologies LiteSpeed Cache. This vulnerability allows for remote attacks due to the lack of proper authorizatio...
CVE-2023-45000: Missing Authorization
Missing Authorization vulnerability in LiteSpeed Technologies LiteSpeed Cache.This issue affects LiteSpeed Cache: from n/a through 5.7...
CVE-2023-40000: Improper Neutralization of Input During Web Page Generation
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in LiteSpeed Technologies LiteSpeed Cache allows Stored XSS.This issue affects LiteSpeed Cache: from n/a through 5.7...
LiteSpeed Cache Plugin for WordPress < 5.7.0.1 Cross-Site Scripting
The WordPress LiteSpeed Cache Plugin installed on the remote host is affected by an unauthenticated stored Cross-Site Scripting XSS via nameservers and msg. Note that the scanner has not tested for these issues but has instead relied only on the application's self-reported version number. No sour...
The vulnerability of the update_cdn_status() function in the LiteSpeed Cache plugin for WordPress (LSCWP), a content management system for WordPress websites, allows a hacker to gain unauthorized access to protected information or enhance their privileges.
The vulnerability of the updatecdnstatus function in the LiteSpeed Cache plugin for WordPress LSCWP, a content management system for WordPress websites, is related to the lack of protective measures for website structures. Exploiting this vulnerability can allow an attacker to gain unauthorized...
LiteSpeed Cache < 5.7.0.1 - Unauthenticated CDN Status Update
Description The plugin is vulnerable to unauthorized modification of data due to a missing authorization check on the 'updatecdnstatus' function, allowing unauthenticated attackers to modify the plugin's CDN status...
LiteSpeed Cache < 5.7.0.1 - Unauthenticated Stored XSS
Description The plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'nameservers' and 'msg' parameters due to insufficient input sanitization and output escaping, allowing unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user...
Exploit for Cross-site Scripting in Litespeedtech Litespeed_Cache
CVE-2023-40000 LiteSpeed Cache plugin for WordPress that could...
WordPress LiteSpeed Plugin Vulnerability Puts 5 Million Sites at Risk
A security vulnerability has been disclosed in the LiteSpeed Cache plugin for WordPress that could enable unauthenticated users to escalate their privileges. Tracked as CVE-2023-40000, the vulnerability was addressed in October 2023 in version 5.7.0.1. "This plugin suffers from unauthenticated...
WordPress LiteSpeed Cache Plugin <= 5.7 is vulnerable to Broken Access Control
Software LiteSpeed Cache Type Plugin Vulnerable versions = 5.7 Fixed in 5.7.0.1 OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2023-45000 Patch priority High CVSS severity High 8.2 Developer Hai Zheng / Lite Speed Cache PSID b9853af17bd3 Credits Rafie Muhammad...
WordPress LiteSpeed Cache Plugin <= 5.7 is vulnerable to Cross Site Scripting (XSS)
Software LiteSpeed Cache Type Plugin Vulnerable versions = 5.7 Fixed in 5.7.0.1 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2023-40000 Patch priority High CVSS severity High 8.3 Developer Hai Zheng / Lite Speed Cache PSID 61e99b6b8264 Credits Rafie Muhammad Patchsta...
CVE-2024-25678
In LiteSpeed QUIC LSQUIC Library before 4.0.4, DCID validation is mishandled...
Design/Logic Flaw
In LiteSpeed QUIC LSQUIC Library before 4.0.4, DCID validation is mishandled...
CVE-2024-25678
In LiteSpeed QUIC LSQUIC Library before 4.0.4, DCID validation is mishandled...
CVE-2024-25678
In LiteSpeed QUIC LSQUIC Library before 4.0.4, DCID validation is mishandled...
CVE-2024-25678
Summary: CVE-2024-25678 affects the LiteSpeed QUIC (LSQUIC) Library prior to 4.0.4, due to mishandled DCID validation. The issue is tied to the authentication/DCID handling behavior in LSQUIC. Affected software: LiteSpeed QUIC (LSQUIC) Library versions before 4.0.4. Root cause (as stated): Mishan...
CVE-2024-25678
In LiteSpeed QUIC LSQUIC Library before 4.0.4, DCID validation is mishandled...
PT-2024-21086 · Litespeed · Lsquic
Name of the Vulnerable Software and Affected Versions: LiteSpeed QUIC LSQUIC Library versions prior to 4.0.4 Description: The issue is related to mishandled DCID validation. Recommendations: For versions prior to 4.0.4, update to version 4.0.4 or later to resolve the issue...
