Medium severity6.1NVD Advisory· Published Jan 3, 2022· Updated Jun 17, 2026
CVE-2021-25001
CVE-2021-25001
Description
The Booster for WooCommerce WordPress plugin before 5.4.9 does not sanitise and escape the wcj_create_products_xml_result parameter before outputting back in the admin dashboard when the Product XML Feeds module is enabled, leading to a Reflected Cross-Site Scripting issue
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- WordPress/Booster for WooCommercedescription
- Range: <5.4.9
Patches
Vulnerability mechanics
References
1- wpscan.com/vulnerability/76f0257d-aae7-4054-9b3d-ba10b4005cf1nvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.