CVE-2021-36899: Asset Cleanup: Page Speed Booster Project Asset Cleanup: Page Speed Booster

Medium severity, CVSS 4.8. EPSS: 0.6% chance of exploitation in the next 30 days.

Authenticated (admin+) Reflected Cross-Site Scripting (XSS) vulnerability in Gabe Livan's Asset CleanUp: Page Speed Booster plugin <= 1.3.8.4 at WordPress.

Affected products

• Asset Cleanup: Page Speed Booster Project Asset Cleanup: Page Speed Booster: before 1.3.8.5 (fixed in 1.3.8.5)

Published 2022-10-11. Last modified 2026-06-17.