CVE-2023-40000

This repository contains a Nuclei template for detecting the presence of vulnerable versions of the LiteSpeed Cache WordPress plugin (CVE-2023-40000). It checks the version in readme.txt and flags versions below 5.7.0.1 as vulnerable.

This repository contains a functional proof-of-concept exploit for CVE-2023-40000, a stored XSS vulnerability in the LiteSpeed Cache WordPress plugin. The exploit leverages unsanitized input in the `update_cdn_status` function to inject malicious JavaScript, which creates an admin account and maintains persistence.

This repository contains a functional exploit PoC for CVE-2023-40000, targeting the LiteSpeed Cache WordPress plugin. The exploit leverages an XSS vulnerability to create an administrator account via a crafted POST request to the vulnerable endpoint.