## https://sploitus.com/exploit?id=78CF5539-4F01-5431-8877-828CDCCD84B7
# cve-2023-40000
That's a PoC of cve-2023-40000. Wordpress LiteSpeed Cache exploit.
The CVE could be applied to all LiteSpeed Cache < 5.7.0.1.
Works in two modes: `check` and `attack`.
The vulnerable IPs would grep version. If there is no version (the target is covered by WAF).
XSS code is encrypted for eval function with pre-defined login/pass/email.
```
# user_login=theattacker
# email=theattacker@whatever.com
# pass1=attackpass&pass2=attackpass
# role=administrator
```
## usage
```
echo "----------------Welcome-to-cve-2023-40000-script-by-1veresk------------+";
echo "+----------------------------------------------------------------------+";
echo "+-------------------For-The-Help---------------------------------------+";
echo "Example#1: ./cve-2023-40000.sh -h--------------------------------------+";
echo "+-------------------For-The--Check-------------------------------------+";
echo "Example#2: ./cve-2023-40000.sh <TARGET_FILE> <MODE>--------------------+";
echo "+----------------------------------------------------------------------+";
```