CVE-2024-3246

The LiteSpeed Cache plugin for WordPress contains a cross-site request forgery vulnerability in versions 6.2.0.1 and earlier due to insufficient nonce validation on certain functions. An unauthenticated attacker could exploit this flaw by crafting a malicious request that, if a site administrator were tricked into clicking a link, would allow the attacker to modify token settings and inject arbitrary JavaScript code into the site.

Based on public CVE data (MITRE/NVD).