CVE-2022-0431

Summary (CVE-2022-0431) The vulnerability affects the WordPress Insights from Google PageSpeed plugin prior to version 4.0.4. The issue arises because the plugin does not sanitise and escape several parameters when outputting them in attributes on the settings dashboard, enabling a Reflected Cros...