CVE-2024-9170

🗓️ 26 Nov 2024 09:15:06Reported by [email protected]Type

nvd

nvd🔗 web.nvd.nist.gov👁 10 Views

The Booster for WooCommerce plugin is vulnerable to Stored Cross-Site Scripting via wcj_product_meta shortcod

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2024-9170	26 Nov 202408:43	–	circl
CNNVD	WordPress plugin WordPress Booster for WooCommerce 跨站脚本漏洞	26 Nov 202400:00	–	cnnvd
CVE	CVE-2024-9170	26 Nov 202408:31	–	cve
Cvelist	CVE-2024-9170 Booster for WooCommerce <= 7.2.3 - Authenticated (ShopManager+) Stored Cross-Site Scripting via wcj_product_meta Shortcode	26 Nov 202408:31	–	cvelist
EUVD	EUVD-2024-50279	3 Oct 202520:07	–	euvd
Patchstack	WordPress Booster for WooCommerce Plugin <= 7.2.3 is vulnerable to Cross Site Scripting (XSS)	25 Nov 202400:00	–	patchstack
Patchstack	WordPress Booster for WooCommerce plugin <= 7.2.3 - Authenticated (ShopManager+) Stored Cross-Site Scripting via wcj_product_meta Shortcode vulnerability	25 Nov 202421:52	–	patchstack
Positive Technologies	PT-2024-39468 · WordPress · Booster For Woocommerce	26 Nov 202400:00	–	ptsecurity
RedhatCVE	CVE-2024-9170	23 May 202506:44	–	redhatcve
Vulnrichment	CVE-2024-9170 Booster for WooCommerce <= 7.2.3 - Authenticated (ShopManager+) Stored Cross-Site Scripting via wcj_product_meta Shortcode	26 Nov 202408:31	–	vulnrichment

NVD

Node

booster booster_for_woocommerceRange<7.2.4wordpress

Source	Link
wordpress	www.wordpress.org/plugins/woocommerce-jetpack/
booster	www.booster.io/changelog/
booster	www.booster.io/shortcodes/wcj_product_meta/
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/0abf9705-2716-403f-9348-e43a8d8fb1d2
plugins	www.plugins.trac.wordpress.org/browser/woocommerce-jetpack/trunk/includes/shortcodes/class-wcj-products-shortcodes.php
plugins	www.plugins.trac.wordpress.org/changeset/3187178/

05 Feb 2025 16:42Current

CVSS 3.14.8 - 5.5

EPSS0.00362

woocommerce plugin stored cross-site scripting wcj_product_meta shortcode wordpress insufficient input sanitization output escaping shopmanager-level access