Stored Cross-Site Scripting in Booster for WooCommerce Plugin by WordPress

CVE-2023-4945

What is CVE-2023-4945?

The Booster for WooCommerce plugin for WordPress has a vulnerability that allows authenticated users with contributor-level permissions to execute arbitrary JavaScript via multiple shortcodes. This issue arises from inadequate sanitization of user input and improper output escaping of attributes. When exploited, this vulnerability can inject malicious scripts that run whenever users access the affected pages, potentially compromising user data and site integrity.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References