RECOMMENDED TO UPGRADE TO THE LATEST PATCHED VERSION FOR LITESPEED CACHE USERS

The Vulnerability:

The LiteSpeed Cache plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the ‘esi’ shortcode in versions up to, and including, 5.6.

The Possibility:

Makes it possible for authenticated attackers with contributor-level and above permissions to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.

The Discover:

István Márton, wordfence security researcher.

The Solution:

Update LiteSpeed Cache patched the vulnerability in version 5.7, released to WordPress.org on October 10.

The References:

https://wptavern.com/litespeed-cache-5-7-patches-xss…