CVE-2021-24964CWE-79

LiteSpeed Cache < 4.4.4 - IP Check Bypass to Unauthenticated Stored XSS

Medium · published January 3, 2022

CVSS v3.1
6.1
EPSS
1%
Percentile
68.4
In the wild
Unconfirmed
What it is

The LiteSpeed Cache WordPress plugin before 4.4.4 does not properly verify that requests are coming from QUIC.cloud servers, allowing attackers to make requests to certain endpoints by using a specific X-Forwarded-For header value. In addition, one of the endpoint could be used to set CSS code if a setting is enabled, which will then be output in some pages without being sanitised and escaped. Combining those two issues, an unauthenticated attacker could put Cross-Site Scripting payloads in pages visited by users.

The record
Technical detail
CVSS v3.1
6.1 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.01216 · 68.4th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2022-01-03T12:49Z
EPSS history
Timeline
  • 03 JAN 12:49Z
    LiteSpeed Cache < 4.4.4 - IP Check Bypass to Unauthenticated Stored XSS
    cvelistv5