Approved changes feed: RSS · Atom

cpe:2.3:a:booster:booster_plus_for_woocommerce:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorBooster (41b4194b-cf95-5787-aea4-bfeca0a44f9c)
ProductBooster Plus For Woocommerce (2f8ad4aa-d8e9-54c0-98b5-30d1227f8711)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/josedu90/booster-plus-for-woocommerce purl2cpe 2026-06-01 10:16:36.302902

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-4227 vulnerable 2026-06-08 05:51:37.009967 Booster for WooCommerce - Reflected Cross-Site Scripting
The Booster for WooCommerce WordPress plugin before 5.6.3, Booster Plus for WooCommerce WordPress plugin before 6.0.0, Booster Elite for WooCommerce WordPress plugin before 6.0.0 do not escape some URLs and parameters before outputting them back in attributes, leading to Reflected Cross-Site Scripting
Published: 2022-12-26T12:28:11.362Z
Updated: 2025-04-14T14:08:53.277Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.