CVE-2022-4227

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

The Booster for WooCommerce WordPress plugin before 5.6.3, Booster Plus for WooCommerce WordPress plugin before 6.0.0, Booster Elite for WooCommerce WordPress plugin before 6.0.0 do not escape some URLs and parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Affected software

Vendor	Product	Versions
Unknown	Booster for WooCommerce	< 5.6.3
Unknown	Booster Plus for WooCommerce	< 6.0.0
Unknown	Booster Elite for WooCommerce	< 6.0.0

References

https://wpscan.com/vulnerability/90d3022c-5d35-4ef2-ab87-6919268db890Third Party Advisory
https://wpscan.com/vulnerability/90d3022c-5d35-4ef2-ab87-6919268db890Third Party Advisory

Timeline

Published: Dec 26, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-422707.8NVIDIA distributions of Linux contain a vulnerability in nvdla_emu_task_submit, where unvalidated input may allow a local attacker to cause CVE-2022-422717.8NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can cause a buffer overflow and cause a denial of service CVE-2022-422728.8NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can cause a buffer overflow, which may lead to code execut CVE-2022-422738.8NVIDIA BMC contains a vulnerability in libwebsocket, where an authorized attacker can cause a buffer overflow and cause a denial of service CVE-2022-422747.8NVIDIA BMC contains a vulnerability in IPMI handler, where an authorized attacker can cause a buffer overflow and cause a denial of service CVE-2022-422757.1NVIDIA BMC IPMI handler allows an unauthenticated host to write to a host SPI flash bypassing secureboot protections. This may lead to a los CVE-2022-422768.2NVIDIA DGX A100 contains a vulnerability in SBIOS in the SmiFlash, where a local user with elevated privileges can read, write and erase fla CVE-2022-422778.2NVIDIA DGX Station contains a vulnerability in SBIOS in the SmiFlash, where a local user with elevated privileges can read, write and erase CVE-2022-422787.8NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can read and write to arbitrary locations within the memor CVE-2022-422798.8NVIDIA BMC contains a vulnerability in SPX REST API, where an authorized attacker can inject arbitrary shell commands, which may lead to cod CVE-2022-42287.5A vulnerability classified as problematic has been found in SourceCodester Book Store Management System 1.0. This affects an unknown part of CVE-2022-422807.8NVIDIA BMC contains a vulnerability in SPX REST auth handler, where an un-authorized attacker can exploit a path traversal, which may lead t