Lucene search
China National Vulnerability DatabaseCNVD-2022-68540HistoryJan 05, 2022 - 12:00 a.m.
WordPress Plugin Booster for WooCommerce Cross-Site Scripting Vulnerability (CNVD-2022-68540)
2022-01-0500:00:00
China National Vulnerability Database
www.cnvd.org.cn
6
0.001 Low
EPSS
Percentile
40.3%
WordPress is a set of blogging platform developed using the PHP language. A cross-site scripting vulnerability exists in the WordPress plugin Booster for WooCommerce, which stems from the program not filtering and escaping the wcj_notice parameter before outputting it back to the administration page. An attacker could use this vulnerability to steal cookie-based authentication credentials.
| CPE | Name | Operator | Version |
|---|---|---|---|
| wordpress booster for woocommerce | lt | 5.4.9 |
Related
wpvulndb
wpvulndb
wpexploit
wpexploit
patchstack
patchstack
nvd
nvd
CVE-2021-24999
2022-01-03 13:15:08
prion
prion
Cross site scripting
2022-01-03 13:15:00
cve
cve
CVE-2021-24999
2022-01-03 13:15:08
cvelist
cvelist