Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

litespeedtech — Vulnerabilities & Security Advisories 17

Browse all 17 CVE security advisories affecting litespeedtech. AI-powered Chinese analysis, POCs, and references for each vulnerability.

LiteSpeed Technologies develops high-performance web server and caching solutions primarily used for serving web content efficiently. Historically, their products have been vulnerable to remote code execution, cross-site scripting, and privilege escalation vulnerabilities, often stemming from input validation flaws and improper access controls. While no major public security incidents have been widely documented, the six CVEs on record highlight recurring issues in request handling and authentication mechanisms. Their security posture reflects common challenges in complex web server software, where feature-rich implementations can introduce exploitable weaknesses if not properly sanitized or restricted.

Found 11 results / 17 Clear Filters
CVE ID Title CVSS Severity Published
CVE-2026-93389 LiteSpeed Cache <= 7.9.1 - Unauthenticated Sensitive Information Disclosure (WooCommerce Store API Cart/Checkout PII + Cart-Token) via Public REST Caching — LiteSpeed Cache CWE-200 8.2 High 2026-11-05
CVE-2026-116763 LiteSpeed Cache <= 7.9.1 - Unauthenticated Stored Cross-Site Scripting via HTML Minifier Predictable Placeholder (md5(REQUEST_TIME) + two-pass str_replace) — LiteSpeed Cache CWE-79 5.4 Medium 2026-10-29
CVE-2026-109215 LiteSpeed Cache <= 7.9.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via VPI Image Attribute Re-Serialization — LiteSpeed Cache CWE-79 6.4 Medium 2026-10-29
CVE-2026-76579 LiteSpeed Cache <= 7.9 - Reflected Cross-Site Scripting via ESI 'esi' Parameter — LiteSpeed Cache CWE-79 4.7 Medium 2026-09-19
CVE-2026-3129 LiteSpeed Cache <= 7.7 - Authenticated (Author+) Stored Cross-Site Scripting via img Tag Attributes — LiteSpeed Cache CWE-79 6.4 Medium 2026-08-28
CVE-2026-18978 LiteSpeed Cache <= 7.8.1 - Unauthenticated Stored Cross-Site Scripting via Comment Content — LiteSpeed Cache CWE-79 7.2 High 2026-08-28
CVE-2026-3375 LiteSpeed Cache <= 7.7 - Unauthenticated Stored Cross-Site Scripting via QUIC.cloud CCSS/UCSS REST API Endpoints — LiteSpeed Cache CWE-79 7.2 High 2026-05-27
CVE-2025-12450 LiteSpeed Cache <= 7.5.0.1 - Reflected Cross-Site Scripting — LiteSpeed Cache CWE-79 6.1 Medium 2025-10-29
CVE-2024-9169 litespeed cache <= 6.4.1 - Authenticated (Administrator+) Stored Cross-Site Scripting — LiteSpeed Cache CWE-79 5.5 Medium 2024-09-25
CVE-2024-3246 LiteSpeed Cache <= 6.2.0.1 - Cross-Site Request Forgery to Stored Cross-Site Scripting — LiteSpeed Cache CWE-352 6.1 Medium 2024-07-24
CVE-2023-4372 LiteSpeed Cache <= 5.6 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode — LiteSpeed Cache CWE-79 6.4 Medium 2024-01-11

This page lists every published CVE security advisory associated with litespeedtech. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.