Booster for WooCommerce, CVE-2022-4227

CVE, Research URL: CVE-2022-4227
Home page URL: Security reports for Booster for WooCommerce
Application: Booster for WooCommerce
Published on: Dec 26, 2022
Research Description: The Booster for WooCommerce WordPress plugin before 5.6.3, Booster Plus for WooCommerce WordPress plugin before 6.0.0, Booster Elite for WooCommerce WordPress plugin before 6.0.0 do not escape some URLs and parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting
Affected versions: Min -, max 7.1.0.
Status: vulnerable