Vulnerabilities > Litespeedtech > Litespeed Cache > Low
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2022-01-03 | CVE-2021-24964 | Cross-site Scripting vulnerability in Litespeedtech Litespeed Cache The LiteSpeed Cache WordPress plugin before 4.4.4 does not properly verify that requests are coming from QUIC.cloud servers, allowing attackers to make requests to certain endpoints by using a specific X-Forwarded-For header value. | 2.6 |
| 2022-01-03 | CVE-2021-24963 | Cross-site Scripting vulnerability in Litespeedtech Litespeed Cache The LiteSpeed Cache WordPress plugin before 4.4.4 does not escape the qc_res parameter before outputting it back in the JS code of an admin page, leading to a Reflected Cross-Site Scripting | 3.5 |