CVE-2021-36899

概要

参考情報

• patchstack.com/database/vulnerability/wp-asset-clean-up/wordpress-asset-cleanup-page-speed-booster-plugin-1-3-8-4-authenticated-reflected-cross-site-scripting-xss-vulnerability · Third Party Advisory
• wordpress.org/plugins/wp-asset-clean-up · Product

page speed booster project のその他の脆弱性

• CVE-2021-24983中 6.1The Asset CleanUp: Page Speed Booster WordPress plugin before 1.3.8.5 does not sanitise and escape POSted parameters sent to the wpassetclea…
• CVE-2021-24937中 6.1The Asset CleanUp: Page Speed Booster WordPress plugin before 1.3.8.5 does not escape the wpacu_selected_sub_tab_area parameter before outpu…