Booster for WooCommerce < 5.4.9 - Reflected Cross-Site Scripting in General Module

2021-12-0100:00:00

Jeremie Amsellem

151

woocommerce

booster

cross-site scripting

general module

enable

settings

exploit

EPSS

0.001

Percentile

43.7%

JSON

The plugin does not sanitise and escape the wcj_delete_role parameter before outputting back in the admin dashboard when the General module is enabled, leading to a Reflected Cross-Site Scripting issue

The "General" module needs to be enabled in "Woocommerce -> Booster Settings -> Booster".

https://example.com/wp-admin/admin.php?page=wcj-tools&tab=custom_roles&wcj_delete_role=<script>alert(/XSS/)<%2Fscript>

EPSS

0.001

Percentile

43.7%

JSON

Related for WPEX-ID:BC167B3A-24EE-4988-9934-189B6216CE40