Litespeed Cache@* Security Vulnerabilities and Issues — Litespeed Cache@* CVE List

Lucene search

LitespeedtechLitespeed Cache*

9 matches found

CVE•added 2024/04/16 6:15 p.m.•320 views

CVE-2023-40000

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LiteSpeed Technologies LiteSpeed Cache allows Stored XSS.This issue affects LiteSpeed Cache: from n/a through 5.7.

8.3CVSS6.6AI score0.47521EPSS

Web

CVE•added 2024/10/05 4:15 p.m.•224 views

CVE-2024-47374

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in LiteSpeed Technologies LiteSpeed Cache allows Stored XSS.This issue affects LiteSpeed Cache: from n/a through 6.5.0.2.

7.1CVSS7.2AI score0.00291EPSS

In wild

CVE•added 2024/10/20 12:15 p.m.•120 views

CVE-2024-44000

Insufficiently Protected Credentials vulnerability in LiteSpeed Technologies LiteSpeed Cache allows Authentication Bypass.This issue affects LiteSpeed Cache: from n/a before 6.5.0.1.

9.8CVSS9.7AI score0.91577EPSS

CVE•added 2024/10/29 10:15 a.m.•117 views

CVE-2024-50550

Incorrect Privilege Assignment vulnerability in LiteSpeed Technologies LiteSpeed Cache allows Privilege Escalation.This issue affects LiteSpeed Cache: from n/a through 6.5.1.

9.8CVSS8.2AI score0.00539EPSS

CVE•added 2024/04/16 6:15 p.m.•63 views

CVE-2023-45000

Missing Authorization vulnerability in LiteSpeed Technologies LiteSpeed Cache.This issue affects LiteSpeed Cache: from n/a through 5.7.

8.2CVSS6.8AI score0.00302EPSS

CVE•added 2024/07/24 4:15 a.m.•60 views

CVE-2024-3246

The LiteSpeed Cache plugin for WordPress is vulnerable to Cross-Site Request Forgery in all versions up to, and including, 6.2.0.1. This is due to missing or incorrect nonce validation. This makes it possible for unauthenticated attackers to update the token setting and inject malicious JavaScript ...

6.1CVSS6AI score0.00189EPSS

CVE•added 2024/09/25 9:15 a.m.•57 views

CVE-2024-9169

The LiteSpeed Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via plugin debug settings in all versions up to, and including, 6.4.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with administrator-level permis...

5.5CVSS5.3AI score0.00094EPSS

CVE•added 2024/10/05 4:15 p.m.•54 views

CVE-2024-47373

6.5CVSS6.7AI score0.00064EPSS

CVE•added 2024/10/16 2:15 p.m.•53 views

CVE-2024-47637

: Relative Path Traversal vulnerability in LiteSpeed Technologies LiteSpeed Cache allows Path Traversal.This issue affects LiteSpeed Cache: from n/a through 6.4.1.

8.8CVSS8.8AI score0.00891EPSS