WordPress Plugin Vulnerabilities

LiteSpeed Cache < 5.7 - Contributor+ Stored XSS

Description

The plugin does not escape the cache attribute of its esi shortcode before outputting it back in a page/post where the shortcode is embed, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks

Affects Plugins

Plugin icon
litespeed-cache
Fixed in 5.7

References

CVE
CVE-2023-4372
URL
https://www.wordfence.com/blog/2023/10/4-million-wordpress-sites-affected-by-stored-cross-site-scripting-vulnerability-in-lightspeed-cache-plugin/

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79
CVSS
5.9 (medium)

Miscellaneous

Original Researcher
Lana Codes
Verified
Yes
WPVDB ID
df24c0e0-62b7-4a48-aaa5-afddbf917ce7

Timeline

Publicly Published
2023-10-23 (about 2 years ago)
Added
2023-10-24 (about 2 years ago)
Last Updated
2023-10-24 (about 2 years ago)

Other

Published
Title
Published
2024-11-01
Title
Element Pack Elementor Addons (Header Footer, Template Library, Dynamic Grid & Carousel, Remote Arrows) < 5.10.2 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Custom Gallery Widget
Published
2025-04-30
Title
Nautic Pages <= 2.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
Published
2025-04-01
Title
Smartarget Popup <= 1.4 - Authenticated (Administrator+) Stored Cross-Site Scripting
Published
2022-04-08
Title
Floating Chat Widget < 2.8.4 - Admin+ Stored Cross-Site Scripting
Published
2024-12-17
Title
Easy Language Switcher <= 1.0 - Reflected Cross-Site Scripting