Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 23
Reset filtersLiteSpeed Cache <= 7.9 - Unauthenticated Server-Side Request Forgery
LiteSpeed Cache <= 7.8.1 - Unauthenticated Stored Cross-Site Scripting via Comment Content
LiteSpeed Cache <= 7.7 - Authenticated (Author+) Stored Cross-Site Scripting via img Tag Attributes
LiteSpeed Cache <= 7.7 - Unauthenticated Stored Cross-Site Scripting via QUIC.cloud CCSS/UCSS REST API Endpoints
LiteSpeed Cache <= 7.5.0.1 - Reflected Cross-Site Scripting
LiteSpeed Cache <= 7.0.1 - Authenticated (Editor+) Server-Side Request Forgery
LiteSpeed Cache <= 6.5.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
LiteSpeed Cache <= 6.5.1 - Unauthenticated Privilege Escalation
LiteSpeed Cache <= 6.1 - Unauthenticated Stored Cross-Site Scripting
LiteSpeed Cache <= 6.5.0.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
LiteSpeed Cache <= 6.4.1 - Authenticated (Author+) Path Traversal
litespeed cache <= 6.4.1 - Authenticated (Administrator+) Stored Cross-Site Scripting
LiteSpeed Cache <= 6.4.1 - Unauthenticated Sensitive Information Exposure via Log Files
LiteSpeed Cache <= 6.3.0.1 - Unauthenticated Privilege Escalation
LiteSpeed Cache <= 6.2.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting
LiteSpeed Cache <= 5.7 - Unauthenticated Stored Cross-Site Scripting via 'nameservers' and '_msg'
LiteSpeed Cache <= 5.7 - Missing Authorization via update_cdn_status
LiteSpeed Cache <= 5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode
LiteSpeed Cache <= 5.3 - Missing Authorization to Toggle Crawler State
LiteSpeed Cache <= 4.4.3 - Authorization Bypass
LiteSpeed Cache <= 4.4.3 - Reflected Cross-Site Scripting via qc_res
LiteSpeed Cache <= 3.6 - Authenticated Stored Cross-Site Scripting via IP setting
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.