LiteSpeed Cache <= 7.9.1 - Authenticated (Subscriber+) Stored Cross-Site Scripting via VPI Image Attribute Re-Serialization

Özet

Türkçe özeti yalnızca kritik ve yüksek önemdeki açıklar için hazırlıyoruz. Bu açık için kaynağın kendi açıklamasını gösteriyoruz.

The LiteSpeed Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'bbp_reply_content' parameter in all versions up to, and including, 7.9.1 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with subscriber-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Exploitation requires that an administrator has enabled Viewport Images (VPI) and configured a VPI filename that matches an image the attacker can embed in user-generated content — such as a bbPress topic where Subscriber-level Participants are permitted to post replies containing raw img tags.

Etkilenen sürümler1 yazılım

Kaynaklar8 kaynak

• CVE.org kaydı
• NVD kaydı
• wordfence.com/…lities/id/8bf9b130-bb1e-43fc-b5c9-337646b8976e Diğer
• plugins.trac.wordpress.org/…r/litespeed-cache/tags/7.9.1/src/media.cls.php Diğer
• plugins.trac.wordpress.org/…r/litespeed-cache/tags/7.9.1/src/media.cls.php Diğer
• plugins.trac.wordpress.org/…litespeed-cache/tags/7.9.1/src/utility.cls.php Diğer
• github.com/…ommit/0fc5f9ad69a138b8ee1fe2d07a5e9ac2574e1eb0 Diğer
• plugins.trac.wordpress.org/…r/litespeed-cache/tags/7.9.2/src/media.cls.php Diğer

Kayıt geçmişi

1. 29 Eki 2026 12:25Yayımlandı

İlgili açıklar

• 8,2 CVE-2026-93389LiteSpeed Cache eklentisinde WooCommerce sepet/ödeme yanıtlarının önbelleğe alınması nedeniyle bilgi sızıntısı
• 5,4 CVE-2026-116763LiteSpeed Cache <= 7.9.1 - Unauthenticated Stored Cross-Site Scripting via HTML Minifier Predictable Placeholder (md5(REQUEST_TIME) + two-pass str_replace)
• 6,4 CVE-2026-104812Redux Framework <= 4.5.16 - Authenticated (Subscriber+) Stored Cross-Site Scripting via 'multi_media' Field Array Key
• 6,4 CVE-2026-120533Redux Framework <= 4.5.16 - Authenticated (Custom+) Stored Cross-Site Scripting via theme_opts Parameter via User Profile
• 6,4 CVE-2026-120553Customer Reviews for WooCommerce <= 5.126.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via 'slides_to_show' Shortcode Attribute
• 2,4 CVE-2026-122190SourceCodester Online Food Ordering System Category Management add_category.php cross site scripting