CVE-2023-40000 WordPress LiteSpeed Cache plugin <= 5.7 - Unauthenticated Site Wide Stored XSS vulnerability

What is CVE-2023-40000?

CVE-2023-40000 is a high-severity cross-site scripting vulnerability in LiteSpeed Cache, published on 16 Apr 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LiteSpeed Technologies LiteSpeed Cache allows Stored XSS.This issue affects LiteSpeed Cache: from n/a through 5.7.

Weakness: CWE-79

Which versions are affected by CVE-2023-40000?

It affects 1 product.

Products include Litespeedtech Litespeed Cache.

How do I fix CVE-2023-40000?

No fix has been published for CVE-2023-40000 yet. Limit exposure of the affected software until one is available.

Escape output for the context it lands in and set a strict Content Security Policy. Upgrading the affected component is the real fix. More about Cross-site scripting.

Is CVE-2023-40000 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2023-40000 exists.

Public exploit code: 1 Nuclei template and 3 proofs of concept on GitHub.

Other vulnerabilities in LiteSpeed Cache

• CVE-2024-44000 WordPress LiteSpeed Cache plugin < 6.5.0.1 - Unauthenticated Account Takeover via Cookie Leak vulnerability Critical 9.8
• CVE-2024-28000 WordPress LiteSpeed Cache plugin <= 6.3.0.1 - Unauthenticated Privilege Escalation vulnerability Critical 9.8
• CVE-2024-47637 WordPress LiteSpeed Cache plugin <= 6.4.1 - Path Traversal vulnerability High 8.8
• CVE-2023-45000 WordPress LiteSpeed Cache plugin <= 5.7 - Unauthenticated Broken Access Control on API vulnerability High 8.2
• CVE-2024-50550 WordPress LiteSpeed Cache plugin <= 6.5.1 - Privilege Escalation vulnerability High 8.1

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-fvp6-8p9w-vffq.