EIP-2026-113870
PRE-CVEWordPress Plugin litespeed cache 3.6 - 'server_ip' Cross-Site Scripting
Title source: legacyExploitation Summary
EIP tracks 1 public exploit for EIP-2026-113870. PoCs published by Nhat Ha.
AI-analyzed exploit summary This is a functional proof-of-concept for a stored XSS vulnerability in the WordPress LiteSpeed Cache plugin (version 3.6). The exploit demonstrates how an attacker can inject malicious JavaScript via the 'server_ip' parameter, which is then stored and executed in the admin panel.
Description
WordPress Plugin litespeed cache 3.6 - 'server_ip' Cross-Site Scripting
Exploits (1)
This is a functional proof-of-concept for a stored XSS vulnerability in the WordPress LiteSpeed Cache plugin (version 3.6). The exploit demonstrates how an attacker can inject malicious JavaScript via the 'server_ip' parameter, which is then stored and executed in the admin panel.