This vulnerability in LiteSpeed Cache involves improper input sanitization during web page generation, leading to stored cross-site scripting (XSS). An attacker with low privileges and requiring user interaction can exploit this to execute arbitrary scripts in the context of the affected web application. The issue affects all versions up to 6.5.0.2. No patch or official remediation guidance has been provided yet.

Successful exploitation could allow an attacker to execute arbitrary scripts in users' browsers, potentially leading to information disclosure, session hijacking, or other impacts related to XSS. The vulnerability requires user interaction and low privileges, and it affects confidentiality, integrity, and availability to a limited extent as reflected by the CVSS vector.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, consider restricting user input or applying web application firewall (WAF) rules to detect and block suspicious input patterns related to XSS in LiteSpeed Cache.