litespeed-cache-xss-poc

LiteSpeed Cache XSS PoC PoC for XSS vulnerability in the LiteSpeed Cache WordPress plugin allowing elevated privileges. This vulnerability was fixed in version 5.7.0.1 of the plugin, and was assigned CVE-2023-40000. According to the plugin's advanced view page, about 35% of users are still using ...

The vulnerability of the update_cdn_status() function in the LiteSpeed Cache plugin for WordPress (LSCWP), a content management system for WordPress websites, allows a hacker to gain unauthorized access to protected information or enhance their privileges.

The vulnerability of the updatecdnstatus function in the LiteSpeed Cache plugin for WordPress LSCWP, a content management system for WordPress websites, is related to the lack of protective measures for website structures. Exploiting this vulnerability can allow an attacker to gain unauthorized...

LiteSpeed Cache < 5.7.0.1 - Unauthenticated CDN Status Update

Description The plugin is vulnerable to unauthorized modification of data due to a missing authorization check on the 'updatecdnstatus' function, allowing unauthenticated attackers to modify the plugin's CDN status...