CVE-2020-36854 | Async JavaScript Plugin up to 2.19.07.14 on WordPress Setting aj_steps cross site scripting

October 17, 2025 Yanac

A vulnerability described as problematic has been identified in Async JavaScript Plugin up to 2.19.07.14 on WordPress. This impacts the function aj_steps of the component Setting Handler. Executing manipulation can lead to cross site scripting.

This vulnerability is tracked as CVE-2020-36854. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More