CVE-2023-40000: WordPress LiteSpeed Cache plugin <= 5.7 - Unauthenticated Site Wide Stored XSS vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LiteSpeed Technologies LiteSpeed Cache allows Stored XSS.This issue affects LiteSpeed Cache: from n/a through 5.7.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress LiteSpeed Cacheto a version that resolves this vulnerability.Fixed in 5.7.0.1
Event History
Frequently Asked Questions
What is the severity of CVE-2023-40000?
CVE-2023-40000 is categorized as a Stored XSS vulnerability with significant risk to affected systems.
How do I fix CVE-2023-40000?
To fix CVE-2023-40000, update LiteSpeed Cache to version 5.8 or later, which addresses the XSS issues.
Which versions are affected by CVE-2023-40000?
CVE-2023-40000 affects LiteSpeed Cache versions from n/a up to and including 5.7.
What types of attacks are possible due to CVE-2023-40000?
CVE-2023-40000 could allow attackers to execute scripts in the context of a user's browser, potentially compromising sensitive data.
Is WordPress LiteSpeed Cache impacted by CVE-2023-40000?
Yes, the WordPress LiteSpeed Cache plugin up to version 5.7 is also vulnerable to CVE-2023-40000.