CVE-2024-47373

WordPress LiteSpeed Cache plugin <= 6.5.0.2 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in LiteSpeed Technologies LiteSpeed Cache litespeed-cache allows Stored XSS.This issue affects LiteSpeed Cache: from n/a through <= 6.5.0.2.

We have discovered 83,215 live websites that are affected by CVE-2024-47373.

Run a Free Instant Scan



Affected Software

Product  Litespeed Cache
Category Cache Tools
Vulnerable Domains83,215 live websites (8.53% of Litespeed Cache install base)
Vulnerable Versions
  • from 0 through 6.5.0.2
Vulnerable Versions Count69 versions ( 75% of all versions)



Details

  • Published - Oct 5, 2024
  • Updated - Apr 28, 2026

Credits

  • TaiYou | Patchstack Bug Bounty Program (finder)

Website Distribution by Country

Number of websites using CVE-2024-47373
United States21,684 websites


Poland5,374 websites
Turkey5,257 websites
GB4,932 websites
Canada4,180 websites
Spain3,741 websites
Romania3,275 websites
France2,945 websites
Germany2,813 websites
Vietnam2,575 websites

Website Distribution by TLD

Number of websites using CVE-2024-47373
.com37,419 websites
.pl3,940 websites
.org3,454 websites
.co.uk2,386 websites
.net2,294 websites
.com.br2,202 websites
.ca1,486 websites
.com.au1,482 websites
.es1,443 websites
.nl912 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2024-47373

Top websites that are affected by CVE-2024-47373. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
*******.fm United States*,***
***********.net United States**,***
*******.com United States**,***
*********.com Germany**,***
******.com United States**,***
******.com United Arab Emirates**,***
*********.net United States**,***
****************.ai United States**,***
*****.app Bulgaria**,***
********.me United States**,***
See full domain list

FAQ

A total of 83,215 websites have been identified as vulnerable to CVE-2024-47373, based on global website indexing conducted by WebTechSurvey.
The Litespeed Cache is affected by the CVE-2024-47373 vulnerability.
Litespeed Cache versions up to and including 6.5.0.2 are vulnerable to CVE-2024-47373.