CVE-2021-24964: LiteSpeed Cache < 4.4.4 - IP Check Bypass to Unauthenticated Stored XSS
The LiteSpeed Cache WordPress plugin before 4.4.4 does not properly verify that requests are coming from QUIC.cloud servers, allowing attackers to make requests to certain endpoints by using a specific X-Forwarded-For header value. In addition, one of the endpoint could be used to set CSS code if a setting is enabled, which will then be output in some pages without being sanitised and escaped. Combining those two issues, an unauthenticated attacker could put Cross-Site Scripting payloads in pages visited by users.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2021-24964?
CVE-2021-24964 has a medium severity rating due to the potential for unauthorized access to certain endpoints.
How do I fix CVE-2021-24964?
To mitigate CVE-2021-24964, update the LiteSpeed Cache WordPress plugin to version 4.4.4 or later.
What are the risks associated with CVE-2021-24964?
CVE-2021-24964 allows attackers to bypass security restrictions by manipulating the X-Forwarded-For header.
Which versions of LiteSpeed Cache are affected by CVE-2021-24964?
LiteSpeed Cache versions prior to 4.4.4 are affected by CVE-2021-24964.
Does CVE-2021-24964 affect all WordPress installations?
CVE-2021-24964 specifically affects WordPress installations using the LiteSpeed Cache plugin before version 4.4.4.