← voltar
CVE-2021-24999

Booster for Woocommerce < 5.4.9 - Reflected Cross-Site Scripting in PDF Invoicing Module

EPSS 0.8%CWE-79
The Booster for WooCommerce WordPress plugin before 5.4.9 does not sanitise and escape the wcj_notice parameter before outputting it back in the admin dashboard when the Pdf Invoicing module is enabled, leading to a Reflected Cross-Site Scripting

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →