CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L
What the vulnerability does
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LiteSpeed Technologies LiteSpeed Cache allows Stored XSS.This issue affects LiteSpeed Cache: from n/a through 5.7.
Explanation of Vulnerability in Simple Terms
LiteSpeed Cache versions up to 5.7 contain a cross-site scripting (XSS) vulnerability that allows attackers to inject malicious scripts into web pages. No authentication or user interaction is required for exploitation. The vulnerability can affect multiple users and compromise site integrity. Site administrators should update to a version newer than 5.7.
What an attacker can do
Inject malicious JavaScript that runs in visitors' browsers and steals data or performs actions on their behalf.
Potential impact on your site
Visitors' browsers could execute attacker-controlled code, leading to credential theft, malware distribution, or defacement.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
