{"vulnerability": "CVE-2026-18978", "sightings": [{"uuid": "32a9bf00-a6bb-4f1a-a1c7-56f0f2708294", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-18978", "type": "seen", "source": "https://bsky.app/profile/suriq.io/post/3mu4my2wpd22p", "content": "LiteSpeed Cache, a WordPress plugin on millions of sites, has a stored cross-site scripting flaw (CVE-2026-18978).\n\nA planted comment can run scripts for anyone viewing the page, but only where comments are left open a certain way.\n\nAffects up to 7.8.1. Update to 7.9.", "creation_timestamp": "2026-08-28T05:29:22.590892Z"}]}