August 10, 2026

CVE Watchtower


← Back to CVE List

CVE-2024-47374NVD

Vulnerability Summary

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LiteSpeed Technologies LiteSpeed Cache litespeed-cache allows Stored XSS.This issue affects LiteSpeed Cache: from n/a through <= 6.5.0.2.
Severity Level
HIGH(7.1)
Published Date
Oct 5, 2024
Last Modified
Apr 23, 2026
Exploitation Status
No confirmed exploitation yet
EPSS Score (30-Day)
22.89%Probability
Root Weakness (CWE)
CWE-79: Cross-site Scripting (XSS) ↗
The software does not neutralize user-controllable input before it is placed in output that is used as a web page.
CVSS v3.1 Base Metrics
Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredNone
User InteractionRequired
ScopeChanged
ConfidentialityLow
IntegrityLow
AvailabilityLow

External References