CVEvulnerability

CVE-2022-4227

6.1 MEDIUM Published 2022-12-26 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2022-12-26
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
6.1 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
6.1 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Description

The Booster for WooCommerce WordPress plugin before 5.6.3, Booster Plus for WooCommerce WordPress plugin before 6.0.0, Booster Elite for WooCommerce WordPress plugin before 6.0.0 do not escape some URLs and parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting

Affected configurations

• booster booster elite for woocommerce (< 6.0.0) • booster booster for woocommerce (< 5.6.3) • booster booster plus for woocommerce (< 6.0.0)

References