CVE-2022-4227

MEDIO 6.1CVE-2022-4227 · Published 26/12/2022 · updated 17/06/2026

En resumen

CVE-2022-4227 es una vulnerabilidad MEDIO (CVSS 6.1) que afecta a booster elite for woocommerce (booster), booster for woocommerce (booster), booster plus for woocommerce (booster).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.43%, mayor que el 37.6% de las vulnerabilidades.
Solución: actualizar a 6.0.0, 5.6.3 o posterior.

Package	Affected versions	Patched versions
booster elite for woocommerce booster	`< 6.0.0`	`6.0.0`
booster for woocommerce booster	`< 5.6.3`	`5.6.3`
booster plus for woocommerce booster	`< 6.0.0`	`6.0.0`

Description

The Booster for WooCommerce WordPress plugin before 5.6.3, Booster Plus for WooCommerce WordPress plugin before 6.0.0, Booster Elite for WooCommerce WordPress plugin before 6.0.0 do not escape some URLs and parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting

References

wpscan.com/vulnerability/90d3022c-5d35-4ef2-ab87-6919268db890 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free