CVE-2023-40000

Severity

HIGH

CVSS

8.3

EPSS

0.54872

Risk score

52.41

CISA KEV

PoC

Published

2024-04-16

Modified

2026-04-28

First seen

2026-08-07

Aliases

EUVD-2023-44623, GHSA-FVP6-8P9W-VFFQ

Products

litespeedtech:LiteSpeed Cache n/a ≤5.7

Sources

euvd EUVD-2023-44623

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LiteSpeed Technologies LiteSpeed Cache allows Stored XSS.This issue affects LiteSpeed Cache: from n/a through 5.7.

References

https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-44623
https://patchstack.com/database/vulnerability/litespeed-cache/wordpress-litespeed-cache-plugin-5-7-unauthenticated-site-wide-stored-xss-vulnerability?_s_id=cve