Fast Velocity Minify
Monthly
Cross-site scripting in the Fast Velocity Minify WordPress plugin through version 3.5.7 allows unauthenticated attackers to have script run in a victim's browser when the victim interacts with attacker-supplied content, with scope change and low confidentiality and integrity impact. The user-interaction requirement is the primary limiting factor, and the specific vulnerable parameter, input field, or feature is not described in the available sources. No CISA KEV confirmation or public exploit was reported in the supplied intelligence; no public exploit identified at time of analysis, and the vuln.today decision label is this_week.
Cross-site scripting in the Fast Velocity Minify WordPress plugin through version 3.5.7 allows unauthenticated attackers to have script run in a victim's browser when the victim interacts with attacker-supplied content, with scope change and low confidentiality and integrity impact. The user-interaction requirement is the primary limiting factor, and the specific vulnerable parameter, input field, or feature is not described in the available sources. No CISA KEV confirmation or public exploit was reported in the supplied intelligence; no public exploit identified at time of analysis, and the vuln.today decision label is this_week.