Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Asset CleanUp: Page Speed Booster 1.3.8.5 Clear all filters
TI-2021-07262 CVE-2021-24983 · GHSA-7fw2-wgp8-f9rj

Asset CleanUp < 1.3.8.5 - Reflected Cross-Site Scripting via AJAX Action

Priority LOW 29

The Asset CleanUp: Page Speed Booster WordPress plugin before 1.3.8.5 does not sanitise and escape POSted parameters sent to the wpassetcleanup_fetch_active_plugins_icons AJAX action (available to admin users), leading t…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00824 Published 2022-02-01 Fixed in 1.3.8.5 CWE-79
TI-2021-07216 CVE-2021-24937 · GHSA-g35p-w6wm-856g

Asset CleanUp < 1.3.8.5 - Reflected Cross-Site Scripting

Priority LOW 29

The Asset CleanUp: Page Speed Booster WordPress plugin before 1.3.8.5 does not escape the wpacu_selected_sub_tab_area parameter before outputting it back in an attribute in an admin page, leading to a Reflected Cross-Sit…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.008 Published 2022-02-01 Fixed in 1.3.8.5 CWE-79