Lucene search

CVE-2022-4227

🗓️ 26 Dec 2022 13:13:15Reported by WPScanType

The Booster for WooCommerce WordPress plugin before 5.6.3, Booster Plus for WooCommerce WordPress plugin before 6.0.0, Booster Elite for WooCommerce WordPress plugin before 6.0.0 do not escape some URLs and parameters before outputting them back in attributes, leading to Reflected Cross-Site Scriptin

Reporter	Title	Published	Views	Family All 4
Cvelist	CVE-2022-4227 Booster for WooCommerce - Reflected Cross-Site Scripting	26 Dec 202212:28	–	cvelist
Prion	Cross site scripting	26 Dec 202213:15	–	prion
WPVulnDB	Booster for WooCommerce - Reflected Cross-Site Scripting	5 Dec 202200:00	–	wpvulndb
NVD	CVE-2022-4227	26 Dec 202213:15	–	nvd

Nvd

Vulners

Node

booster booster_elite_for_woocommerceRange<6.0.0wordpress

booster booster_for_woocommerceRange<5.6.3wordpress

booster booster_plus_for_woocommerceRange<6.0.0wordpress

[
  {
    "vendor": "Unknown",
    "product": "Booster for WooCommerce",
    "versions": [
      {
        "status": "affected",
        "versionType": "custom",
        "version": "0",
        "lessThan": "5.6.3"
      }
    ],
    "defaultStatus": "unaffected",
    "collectionURL": "https://wordpress.org/plugins"
  },
  {
    "vendor": "Unknown",
    "product": "Booster Plus for WooCommerce",
    "versions": [
      {
        "status": "affected",
        "versionType": "custom",
        "version": "0",
        "lessThan": "6.0.0"
      }
    ],
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Unknown",
    "product": "Booster Elite for WooCommerce",
    "versions": [
      {
        "status": "affected",
        "versionType": "custom",
        "version": "0",
        "lessThan": "6.0.0"
      }
    ],
    "defaultStatus": "unaffected"
  }
]

Source	Link
wpscan	www.wpscan.com/vulnerability/90d3022c-5d35-4ef2-ab87-6919268db890

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

26 Dec 2022 13:15Current

6.1Medium risk

Vulners AI Score6.1

CVSS36.1

EPSS0.01383