Description

Cross-site scripting (XSS) vulnerability in service/graph_html.php in the administrator panel in LiteSpeed Web Server 4.1.11 allows remote attackers to inject arbitrary web script or HTML via the gtitle parameter.

Remediation

References

CVE-2012-4871

Related Vulnerabilities

WordPress Plugin Product Slider for WooCommerce by PickPlugins Cross-Site Scripting (1.13.41)

MySQL CVE-2016-0503 Vulnerability (CVE-2016-0503)

WordPress Plugin IzeeChat-Live Chat Cross-Site Scripting (1.0)

Artifactory Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2018-1000206)

Jenkins Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-5321)

Severity

Medium

Classification

CVE-2012-4871 CWE-707

Tags

Missing Update Known Vulnerabilities