
A severe vulnerability has been discovered in the LiteSpeed Cache plugin for WordPress, affecting over five million websites. The vulnerability, tracked as CVE-2023-40000, allows unauthenticated attackers to gain escalated privileges via a Cross-Site Scripting (XSS) attack with just one HTTP request. The problem arises from the plugin’s failure to adequately sanitize user input and escape output. Attackers can exploit the










