A vulnerability described as problematic has been identified in Async JavaScript Plugin up to 2.19.07.14 on WordPress. This impacts the function
aj_steps
of the component Setting Handler. Executing manipulation can lead to cross site scripting.
This vulnerability is tracked as CVE-2020-36854. The attack can be launched remotely. No exploit exists.