Description

Cross-site scripting (XSS) vulnerability in service/graph_html.php in the administrator panel in LiteSpeed Web Server 4.1.11 allows remote attackers to inject arbitrary web script or HTML via the gtitle parameter.

Remediation

References

CVE-2012-4871

Related Vulnerabilities

Joomla Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2020-15697)

WordPress Plugin WP-Table Reloaded Cross-Site Scripting (1.9.3)

Contao Improper Encoding or Escaping of Output Vulnerability (CVE-2019-19714)

WordPress Plugin Facebook for WooCommerce Cross-Site Request Forgery (1.9.14)

WordPress Plugin Easy Custom Sidebars Unspecified Vulnerability (1.0.1)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2012-4871