CVE-2022-4227: Booster for WooCommerce - Reflected Cross-Site Scripting
The Booster for WooCommerce WordPress plugin before 5.6.3, Booster Plus for WooCommerce WordPress plugin before 6.0.0, Booster Elite for WooCommerce WordPress plugin before 6.0.0 do not escape some URLs and parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2022-4227.
What is the severity of CVE-2022-4227?
The severity of CVE-2022-4227 is medium (6.1).
Which plugins are affected by CVE-2022-4227?
The Booster for WooCommerce WordPress plugin (before 5.6.3), Booster Plus for WooCommerce WordPress plugin (before 6.0.0), and Booster Elite for WooCommerce WordPress plugin (before 6.0.0) are affected by CVE-2022-4227.
What is the impact of CVE-2022-4227?
CVE-2022-4227 can lead to Reflected Cross-Site Scripting (XSS) attacks.
How can I fix CVE-2022-4227?
To fix CVE-2022-4227, update the Booster for WooCommerce WordPress plugin to version 5.6.3 or later, the Booster Plus for WooCommerce WordPress plugin to version 6.0.0 or later, or the Booster Elite for WooCommerce WordPress plugin to version 6.0.0 or later.