CVE-2021-47855: LiteSpeed Technologies Openlitespeed

High severity, CVSS 7.2. EPSS: 0.3% chance of exploitation in the next 30 days.

Openlitespeed 1.7.9 contains a stored cross-site scripting vulnerability in the dashboard's Notes parameter that allows administrators to inject malicious scripts. Attackers can craft a payload in the Notes field during listener configuration that will execute when an administrator clicks on the Default Icon.

Affected products

• LiteSpeed Technologies Openlitespeed: version 1.7.9 only

Published 2026-01-21. Last modified 2026-06-17.