CVE-2020-29172

A cross-site scripting (XSS) vulnerability in the LiteSpeed Cache plugin before 3.6.1 for WordPress can be exploited via the Server IP setting

published December 26, 2020

CVSS
—
EPSS
1%
Percentile
60.6
In the wild
Unconfirmed
What it is

A cross-site scripting (XSS) vulnerability in the LiteSpeed Cache plugin before 3.6.1 for WordPress can be exploited via the Server IP setting.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00941 · 60.6th percentile
Published
2020-12-26T01:56Z
EPSS history
Timeline
  • 26 DEC 01:56Z
    A cross-site scripting (XSS) vulnerability in the LiteSpeed Cache plugin before 3.6.1 for WordPress can be exploited via the Server IP setting
    cvelistv5