Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
wpexploitWpvulndbWPEX-ID:8EF35524-D996-4285-ACA2-DC62E02C074D
HistoryDec 26, 2020 - 12:00 a.m.

LiteSpeed Cache < 3.6.1 - Authenticated Stored Cross-Site Scripting

2020-12-2600:00:00
wpvulndb
82

0.001 Low

EPSS

Percentile

36.3%

JSON

The plugin does not sanitise invalid IPs given in its Toolbox page before displaying them in an error message.

Submit a payload such as <img src onerror=alert(/XSS/)> in the Admin IPs section of the Toolbox (/wp-admin/admin.php?page=litespeed-toolbox)

Related

openvas 1
cve 1
cvelist 1
nvd 1
prion 1
wpvulndb 1
openvas
openvas
WordPress LiteSpeed Cache Plugin < 3.6.1 XSS Vulnerability
2021-01-13 00:00:00
cve
cve
CVE-2020-29172
2020-12-26 02:15:12
cvelist
cvelist
CVE-2020-29172
2020-12-26 01:56:28
nvd
nvd
CVE-2020-29172
2020-12-26 02:15:12
prion
prion
Cross site scripting
2020-12-26 02:15:00
wpvulndb
wpvulndb
LiteSpeed Cache < 3.6.1 - Authenticated Stored Cross-Site Scripting
2020-12-26 00:00:00

0.001 Low

EPSS

Percentile

36.3%

JSON
Related for WPEX-ID:8EF35524-D996-4285-ACA2-DC62E02C074D
openvas1cve1cvelist1nvd1prion1wpvulndb1