LiteSpeed Cache rewrites image URLs inside the data-settings attribute of the page buffer when serving WebP images. The rewritten JSON was written back without being fully HTML-encoded, so an attacker who can influence an image URL or the surrounding markup could break out of the attribute and inject arbitrary JavaScript that executes in the... Weiterlesen
Intelligence View
Cross-Site Scripting in LiteSpeed Cache WebP Image Replacement
LiteSpeed Cache rewrites image URLs inside the data-settings attribute of the page buffer when serving WebP images. The rewritten JSON was written back without being fully HTML-encoded, so an attacker who can influence an image URL or the…
SOCIAL SHARE CARD GENERATOR