Skip to content
Threat Feed
Subscribe

Product

LiteSpeed Cache (<= 7.8.1)

1 brief RSS
high advisory

Stored XSS in LiteSpeed Cache for WordPress via Comment Content

An unauthenticated stored XSS vulnerability in LiteSpeed Cache versions 7.8.1 and below allows attackers to inject malicious scripts into WordPress comments by bypassing wp_kses input sanitization.

LiteSpeed Cache web-application xss wordpress
2t 1c