Asset CleanUp: Page Speed Booster, CVE-2021-24937

CVE, Research URL: CVE-2021-24937
Home page URL: Security reports for Asset CleanUp: Page Speed Booster
Application: Asset CleanUp: Page Speed Booster
Published on: Feb 01, 2022
Research Description: The Asset CleanUp: Page Speed Booster WordPress plugin before 1.3.8.5 does not escape the wpacu_selected_sub_tab_area parameter before outputting it back in an attribute in an admin page, leading to a Reflected Cross-Site Scripting issue
Affected versions: max 1.3.8.5.
Status: vulnerable