LiteSpeed Cache versions up to 6.5.0.2 suffer from a stored cross-site scripting vulnerability due to improper input neutralization during web page generation. This vulnerability allows attackers to inject malicious scripts that persist and execute in the context of users' browsers when viewing affected pages. The CVSS 3.1 vector indicates the vulnerability is remotely exploitable without privileges but requires user interaction, and it impacts confidentiality, integrity, and availability at a low level. No patch or official remediation guidance is currently provided, and the product is not a cloud service, so remediation depends on vendor updates.

Successful exploitation of this vulnerability could allow attackers to execute arbitrary scripts in the context of users' browsers, potentially leading to session hijacking, defacement, or other malicious actions affecting confidentiality, integrity, and availability. The impact is rated high based on the CVSS score of 7.1. There are no known active exploits reported at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider applying any available workarounds or mitigations recommended by LiteSpeed Technologies. Monitoring vendor channels for updates is advised. No specific mitigations are detailed in the provided data.