PT-2026-3808 · Litespeed Technologies · Openlitespeed

Cmos · Published 2026-01-21 · Updated 2026-01-21 · CVE-2021-47855

Positive Technologies (AI Summary)

CVSS v3.1

7.2

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Openlitespeed version 1.7.9

Description A stored cross-site scripting issue exists in the dashboard. An attacker can inject malicious scripts into the Notes parameter during listener configuration. These scripts execute when an administrator clicks on the Default Icon.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2021-47855

Affected Products

Openlitespeed

References · 4

• 🔥 https://exploit-db.com/exploits/49727 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-47855 · Security Note
• https://vulncheck.com/advisories/openlitespeed-notes-stored-cross-site-scripting · Note
• https://openlitespeed.org · Note