Reflected XSS Vulnerability in Booster for WooCommerce

CVE-2024-29760

Summary

The Pluggabl LLC Booster for WooCommerce is susceptible to a reflected Cross-site Scripting (XSS) vulnerability, compromising the security of web applications utilizing this plugin. When improperly handling user input during web page generation, the vulnerability allows attackers to inject malicious scripts into the web pages viewed by users. This can lead to the execution of harmful scripts in the context of users' browsers, potentially exposing sensitive data, hijacking sessions, or redirecting users to fraudulent sites. Users of Booster for WooCommerce versions up to 7.1.7 need to ensure proper input validation and consider applying security patches to mitigate risks associated with this vulnerability.

References