← All advisories

Medium severity6.1NVD Advisory· Published Dec 26, 2020· Updated Jun 17, 2026

CVE-2020-29172

CVE-2020-29172

Description

A cross-site scripting (XSS) vulnerability in the LiteSpeed Cache plugin before 3.6.1 for WordPress can be exploited via the Server IP setting.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Litespeedtech/LiteSpeed Cache
cpe:2.3:a:litespeedtech:litespeed_cache:*:*:*:*:*:wordpress:*:*
Range: <3.6.1
WordPress/LiteSpeed Cache plugindescription
WordPress/Litespeed Cachellm-fuzzy
Range: <3.6.1
Package: https://wordpress.org/plugins/litespeed-cache

Patches

Vulnerability mechanics

References

2

wordpress.org/plugins/litespeed-cache/nvdThird Party Advisory
www.litespeedtech.com/products/cache-plugins/wordpress-accelerationnvdProductVendor Advisory

News mentions

0

No linked articles in our index yet.