QID 150485

Date Published: 2022-03-16

QID 150485: WordPress Booster for Woocommerce Plugin: Multiple Reflected Cross-Site Scripting Vulnerabilities (CVE-2021-24999,CVE-2021-25000,CVE-2021-25001)

Booster for WooCommerce is an addon plugin for WooCommerce designed to enhance its functionality through the use of various modules that site owners can enable and disable at any point.

Booster for WooCommerce contains multiple vulnerabilities:
CVE-2021-24999: The plugin does not sanitize and escapes the wcj_notice parameter before outputting it back in the admin dashboard when the Pdf Invoicing module is enabled, leading to a Reflected Cross-Site Scripting.

CVE-2021-25000: The plugin does not sanitize and escapes the wcj_delete_role parameter before outputting back in the admin dashboard when the General module is enabled, leading to a Reflected Cross-Site Scripting issue.

CVE-2021-25001: The plugin does not sanitize and escapes the wcj_create_products_xml_result parameter before outputting back in the admin dashboard when the Product XML Feeds module is enabled, leading to a Reflected Cross-Site Scripting issue.

Affected Versions:
The Booster for WooCommerce WordPress plugin before 5.4.9.

QID Detection Logic:
This QID sends a HTTP GET request and checks for vulnerable version of WordPress plugin running on the target application.

Successful exploitation could allow an attacker to execute arbitrary JavaScript code in the context of the interface or allow the attacker to access sensitive, browser-based information.

CVSS V3 rated as High - 6.1 severity.

CVSS V2 rated as Low - 2.6 severity.

Solution

Customers are advised to upgrade to Booster for WooCommerce 5.4.9 or later version to remediate this vulnerability.

Vendor References

CVE-2021-24999 - wpscan.com/vulnerability/8527f4fe-312f-45c1-ae4c-7e799702fc26
CVE-2021-25000 - wpscan.com/vulnerability/bc167b3a-24ee-4988-9934-189b6216ce40
CVE-2021-25001 - wpscan.com/vulnerability/76f0257d-aae7-4054-9b3d-ba10b4005cf1

CVEs related to QID 150485

CVE-2021-25001 | CVE-2021-25000 | CVE-2021-24999 |

Software Advisories

Advisory ID	Software	Component	Link
Booster for Woocommerce			wordpress.org/plugins/woocommerce-jetpack/

By selecting these links, you may be leaving CVEreport webspace. We have provided these links to other websites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other websites that are more appropriate for your purpose. CVEreport does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, CVEreport does not endorse any commercial products that may be mentioned on these sites. Please address comments about any linked pages to [email protected].