← volver
CVE-2021-24999

Booster for Woocommerce < 5.4.9 - Reflected Cross-Site Scripting in PDF Invoicing Module

EPSS 0.8%CWE-79
The Booster for WooCommerce WordPress plugin before 5.4.9 does not sanitise and escape the wcj_notice parameter before outputting it back in the admin dashboard when the Pdf Invoicing module is enabled, leading to a Reflected Cross-Site Scripting

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →