CVE-2022-4227

The Booster for WooCommerce WordPress plugin before 5.6.3, Booster Plus for WooCommerce WordPress plugin before 6.0.0, Booster Elite for WooCommerce WordPress plugin before 6.0.0 do not escape some URLs and parameters before outputting them back in attributes, leading to Reflected Cross-Site...

CVE-2022-4227

The CVE-2022-4227 entry concerns the Booster for WooCommerce family of WordPress plugins. Affected components: Booster for WooCommerce (pre-5.6.3), Booster Plus for WooCommerce (pre-6.0.0), and Booster Elite for WooCommerce (pre-6.0.0). Root cause: these plugins do not escape certain URLs and par...

CVE-2022-4227 Booster for WooCommerce - Reflected Cross-Site Scripting

The Booster for WooCommerce WordPress plugin before 5.6.3, Booster Plus for WooCommerce WordPress plugin before 6.0.0, Booster Elite for WooCommerce WordPress plugin before 6.0.0 do not escape some URLs and parameters before outputting them back in attributes, leading to Reflected Cross-Site...

CVE-2022-4227 Booster for WooCommerce - Reflected Cross-Site Scripting

The Booster for WooCommerce WordPress plugin before 5.6.3, Booster Plus for WooCommerce WordPress plugin before 6.0.0, Booster Elite for WooCommerce WordPress plugin before 6.0.0 do not escape some URLs and parameters before outputting them back in attributes, leading to Reflected Cross-Site...