CVE-2021-25001

The Booster for WooCommerce WordPress plugin before 5.4.9 does not sanitise and escape the wcj_create_products_xml_result parameter before outputting back in the admin dashboard when the Product XML Feeds module is enabled, leading to a Reflected Cross-Site Scripting issue

Date published : 2022-01-03

https://wpscan.com/vulnerability/76f0257d-aae7-4054-9b3d-ba10b4005cf1