CVE-2024-51915
Plain English Summary
AI-powered analysis for quick understanding
This vulnerability allows an attacker to inject malicious scripts into web pages that are served to users, potentially stealing sensitive information or performing actions on behalf of those users. It affects specific versions of the LiteSpeed Cache software, and the attacker needs to have the ability to submit content that gets stored and displayed on the website.
Technical Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LiteSpeed Technologies LiteSpeed Cache litespeed-cache allows Stored XSS.This issue affects LiteSpeed Cache: from n/a through <= 6.5.2.
CVSS Vector Analysis
Vector String
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:LExploit Resources
Search for proof-of-concept code and exploit modules
Official References
Quick Information
Published
Feb 20, 2026
about 2 months ago
Last Modified
Feb 25, 2026
about 1 month ago