CVE-2012-4871

No fix known EPSS 2%

Cross-site scripting (XSS) vulnerability in service/graph_html.php in the administrator panel in LiteSpeed Web Server 4.1.11 allows remote attackers to inject arbitrary web script or HTML via the gtitle parameter.

Published 2012-09-06 · CVE record · OSV

Products: litespeedtech litespeed_web_server