Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LiteSpeed Technologies LiteSpeed Cache allows Stored XSS.This issue affects LiteSpeed Cache: from n/a through 5.7.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
SolarWinds Web Help Desk has a critical pre-auth RCE chain (CVE-2023-40000-02). Unauthenticated attackers can execute code on the server. Patch to v12.8.2 or later. Stay ahead of attackers. Follow for daily updates.
Post summary
SolarWinds Web Help Desk CVE-2023-40000-02 is a critical pre‑authentication remote code execution vulnerability; a patch to version 12.8.2 or later is available.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | litespeedtech | litespeed_cache | - | wordpress | - |