CVE-2026-95528: Unauthenticated Cross Site Scripting (XSS) in Core Web Vitals & PageSpeed Booster <= 1.0.31 versions.

CVE-2026-95528 · Severity: high · CVSS 7.1 · Published 2026-09-23

Executive brief

Unauthenticated Cross Site Scripting (XSS) in Core Web Vitals & PageSpeed Booster <= 1.0.31 versions.