CVE Database /
CVE-2024-51915
CVE · Medium
CVE-2024-51915 — LiteSpeed Cache [litespeed-cache] < 6.5.3
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2024-51915
|
LiteSpeed Cache [litespeed-cache] < 6.5.3 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
Medium
6.5
|
< 6.5.3
|
6.5.3 |
2024-12-20 |
—
|
CVE-2024-51915
The LiteSpeed Cache plugin for WordPress contains a stored cross-site scripting vulnerability affecting versions prior to 6.5.3, stemming from inadequate sanitization of inputs and escaping of outputs. Attackers with Contributor-level permissions or higher can inject malicious scripts into pages, which then execute for any user who visits those affected pages. The vulnerability allows authenticated users to store and distribute arbitrary JavaScript code through the plugin.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings