Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
wpvulndbWpvulndbWPVDB-ID:8EF35524-D996-4285-ACA2-DC62E02C074D
HistoryDec 26, 2020 - 12:00 a.m.

LiteSpeed Cache < 3.6.1 - Authenticated Stored Cross-Site Scripting

2020-12-2600:00:00
wpscan.com
8

0.001 Low

EPSS

Percentile

36.3%

JSON

The plugin does not sanitise invalid IPs given in its Toolbox page before displaying them in an error message.

PoC

Submit a payload such as in the Admin IPs section of the Toolbox (/wp-admin/admin.php?page=litespeed-toolbox)

CPENameOperatorVersion
litespeed-cachelt3.6.1

Related

openvas 1
cve 1
cvelist 1
wpexploit 1
nvd 1
prion 1
openvas
openvas
WordPress LiteSpeed Cache Plugin < 3.6.1 XSS Vulnerability
2021-01-13 00:00:00
cve
cve
CVE-2020-29172
2020-12-26 02:15:12
cvelist
cvelist
CVE-2020-29172
2020-12-26 01:56:28
wpexploit
wpexploit
LiteSpeed Cache < 3.6.1 - Authenticated Stored Cross-Site Scripting
2020-12-26 00:00:00
nvd
nvd
CVE-2020-29172
2020-12-26 02:15:12
prion
prion
Cross site scripting
2020-12-26 02:15:00

0.001 Low

EPSS

Percentile

36.3%

JSON
Related for WPVDB-ID:8EF35524-D996-4285-ACA2-DC62E02C074D
openvas1cve1cvelist1wpexploit1nvd1prion1