litespeed-cache-xss-poc

LiteSpeed Cache XSS PoC LiteSpeed Cache WordPress 플러그인의 XSS 취약점으로 권한 상승이 가능한 PoC입니다. 이 취약점은 플러그인 버전 5.7.0.1 에서 수정되었으며, CVE-2023-40000으로 지정되었습니다. 플러그인의 고급 보기 페이지에 따르면, 약 35%의 사용자가 여전히 취약한 버전 'Received invalid message from the cloud server. Please submit a ticket.', 'litespeed-cache' ; return...

The vulnerability of the update_cdn_status() function in the LiteSpeed Cache plugin for WordPress (LSCWP), a content management system for WordPress websites, allows a hacker to gain unauthorized access to protected information or enhance their privileges.

The vulnerability of the updatecdnstatus function in the LiteSpeed Cache plugin for WordPress LSCWP, a content management system for WordPress websites, is related to the lack of protective measures for website structures. Exploiting this vulnerability can allow an attacker to gain unauthorized...

LiteSpeed Cache < 5.7.0.1 - Unauthenticated CDN Status Update

Description The plugin is vulnerable to unauthorized modification of data due to a missing authorization check on the 'updatecdnstatus' function, allowing unauthenticated attackers to modify the plugin's CDN status...