Booster for WooCommerce, CVE-2021-25001

CVE, Research URL: CVE-2021-25001
Home page URL: Security reports for Booster for WooCommerce
Application: Booster for WooCommerce
Published on: Jan 03, 2022
Research Description: The Booster for WooCommerce WordPress plugin before 5.4.9 does not sanitise and escape the wcj_create_products_xml_result parameter before outputting back in the admin dashboard when the Product XML Feeds module is enabled, leading to a Reflected Cross-Site Scripting issue
Affected versions: Min -, max 5.4.9.
Status: vulnerable