CVE-2021-24964

MEDIUM

LiteSpeed Cache < 4.4.4 - IP Check Bypass to Unauthenticated Stored XSS

Title source: CVE List
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2021-24964 has a selected CVSS score of 6.1 (medium); EIP currently links 2 curated repository PoCs.

Description

The LiteSpeed Cache WordPress plugin before 4.4.4 does not properly verify that requests are coming from QUIC.cloud servers, allowing attackers to make requests to certain endpoints by using a specific X-Forwarded-For header value. In addition, one of the endpoint could be used to set CSS code if a setting is enabled, which will then be output in some pages without being sanitised and escaped. Combining those two issues, an unauthenticated attacker could put Cross-Site Scripting payloads in pages visited by users.

Description source: CVE List

Exploitation context

Available material

Curated repository PoCs
2

CISA SSVC decision

ExploitationPoC
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated May 22, 2025 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

LiteSpeed Cache

CVE List4.4.4 to < 4.4.4affected

Proofs of concept

2

Curated repository PoCs

GitHubCVE-2021-24964Curated repository PoCby 0xd3vil127Not analyzed1 file

Python · 2.2 KiB

GitHub
PoC details
GitHubCVE-2021-24964Curated repository PoCby yubsy112Not analyzed1 file

Python · 2.2 KiB

GitHub
PoC details

References

2