CVE-2022-4227

MITTEL 6.1CVE-2022-4227 · Published 26/12/2022 · updated 17/06/2026

Kurz gesagt

CVE-2022-4227 ist eine Schwachstelle (MITTEL (CVSS 6.1)) in booster elite for woocommerce (booster), booster for woocommerce (booster), booster plus for woocommerce (booster).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 0.43%, höher als bei 37.6% aller Schwachstellen.
Abhilfe: auf 6.0.0, 5.6.3 oder neuer aktualisieren.

Package	Affected versions	Patched versions
booster elite for woocommerce booster	`< 6.0.0`	`6.0.0`
booster for woocommerce booster	`< 5.6.3`	`5.6.3`
booster plus for woocommerce booster	`< 6.0.0`	`6.0.0`

Description

The Booster for WooCommerce WordPress plugin before 5.6.3, Booster Plus for WooCommerce WordPress plugin before 6.0.0, Booster Elite for WooCommerce WordPress plugin before 6.0.0 do not escape some URLs and parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting

References

wpscan.com/vulnerability/90d3022c-5d35-4ef2-ab87-6919268db890 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free