Cpe:2.3:a:wp-Rocket:wp-Rocket:*:*:*:*:*:wordpress:*:*

WP Rocket versions up to and including 3.21.0.1 are vulnerable to unauthenticated Stored Cross-Site Scripting via the rocket_beacon AJAX endpoint.