← Back to Pulse Feed
PULSE DETAIL
PULSE NAME
Stored XSS Vulnerability Discovered in LiteSpeed Cache Plugin
WHITE Vary Superpro 2024-10-04 Modified: 2024-10-04
2
IOCs
LOW VOLUME
A high-severity stored cross-site scripting (XSS) vulnerability (CVE-2024-47374) has been discovered in the LiteSpeed Cache plugin for WordPress, affecting versions up to 6.5.0.2. This flaw allows attackers to inject malicious JavaScript and potentially hijack user sessions or take over entire sites, especially if an administrator account is compromised. The vulnerability was patched in version 6.5.1, and users are advised to update immediately to protect their sites.
litespeed cacheseptembertaiyouwordpresspatchstackccsshttp headervarygroupvary group
MITRE ATT&CK & Malware Families
ATT&CK TECHNIQUES
Indicators of Compromise (2)
All CVE domain
TYPEINDICATORDESCRIPTIONCREATED
CVE CVE-2024-47374 — 2024-10-04
domain quic.cloud — 2024-10-04
References (1)
↗ https://patchstack.com/articles/unauthenticated-stored-xss-vulnerability-in-litespeed-cache-plugin-affecting-6-million-sites/