CVE Daily

CVE-2021-25000

The Booster for WooCommerce WordPress plugin before 5.4.9 does not sanitise and ...

Medium CVSS 6.1

Overview

The Booster for WooCommerce WordPress plugin before 5.4.9 does not sanitise and escape the wcj_delete_role parameter before outputting back in the admin dashboard when the General module is enabled, leading to a Reflected Cross-Site Scripting issue

CWE: CWE-79 Published: 2022-01-03T13:15:08.763
Risk analysis

This vulnerability is rated 🟡 MEDIUM.

  • CVSS: 6.1 (MEDIUM)
  • Detected tags: none (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags