Skip to content
OpenAdvisories
Medium · 4.8 CVE-2021-36899 EUVD-2021-23475GHSA-q34g-xwpj-xqx4

WordPress Asset CleanUp: Page Speed Booster plugin <= 1.3.8.4 - Authenticated Reflected Cross-Site Scripting (XSS) vulnerability

Published Oct 11, 2022 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Gabe Livan Product: Asset CleanUp: Page Speed Booster (WordPress plugin) Category: Web / CMS

Description

Authenticated (admin+) Reflected Cross-Site Scripting (XSS) vulnerability in Gabe Livan's Asset CleanUp: Page Speed Booster plugin <= 1.3.8.4 at WordPress.

Affected products

VendorProductAffectedFixed
Gabe Livan Asset CleanUp: Page Speed Booster (WordPress plugin) <= 1.3.8.4 – ≤ 1.3.8.4 —

References