WordPress LiteSpeed Cache Plugin Security Flaw Exposes Sites to XSS Attacks

🗓️ 04 Oct 2024 09:11:00Reported by The Hacker NewsType

WordPress LiteSpeed Cache Plugin security flaw exposes sites to XSS attacks. High-severity flaw (CVE-2024-47374) allows arbitrary code execution via stored XSS, affecting versions <=6.5.0.2. Exploit requires "CSS Combine" and "Generate UCSS" settings

Reporter	Title	Published	Views	Family All 89
0day.today	WordPress LiteSpeed Cache Cookie Theft Exploit	18 Sep 202400:00	–	zdt
GithubExploit	Exploit for SQL Injection in Templateinvaders Ti_Woocommerce_Wishlist	25 Jun 202519:52	–	githubexploit
GithubExploit	Exploit for SQL Injection in Templateinvaders Ti_Woocommerce_Wishlist	29 Sep 202406:23	–	githubexploit
GithubExploit	Exploit for Insufficiently Protected Credentials in Litespeedtech Litespeed_Cache	6 Sep 202403:38	–	githubexploit
GithubExploit	Exploit for Insufficiently Protected Credentials in Litespeedtech Litespeed_Cache	6 Sep 202403:38	–	githubexploit
ATTACKERKB	CVE-2024-47374	5 Oct 202400:00	–	attackerkb
BDU FSTEC	The vulnerability of the LiteSpeed Cache plugin for WordPress (LSCWP), a content management system for WordPress websites, allows a hacker to gain unauthorized access to the debug log file “/wp-content/debug.log”.	17 Sep 202400:00	–	bdu_fstec
Circl	CVE-2024-43917	29 Aug 202417:53	–	circl
Circl	CVE-2024-44000	5 Sep 202414:18	–	circl
Circl	CVE-2024-47374	4 Oct 202411:12	–	circl