CVE-2023-4945

creationtimestamp| type| source ---|---|--- 2023-09-14 07:24:10+00:00| seen| https://t.me/cibsecurity/70425...

CVE-2023-4945 Booster for WooCommerce <= 7.1.0 - Authenticated (Contributor+) Stored Cross-Site Scripting via Shortcode

The Booster for WooCommerce plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple shortcodes in versions up to, and including, 7.1.0 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers...

WordPress Booster for WooCommerce Plugin <= 7.1.0 is vulnerable to Cross Site Scripting (XSS)

Software Booster for WooCommerce Type Plugin Vulnerable versions = 7.1.0 Fixed in 7.1.1 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2023-4945 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID 593423d24793 Credits Lana Codes...