Skip to content
CVE PROGRAM SOURCE RECORDUnscored

CVE-2021-24283

Accordion < 2.2.30 - Authenticated Reflected Cross-Site Scripting (XSS)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
WPScan

Description

The tab GET parameter of the settings page is not sanitised or escaped when being output back in an HTML attribute, leading to a reflected XSS issue.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

PickPlugins Accordion

  • 2.2.30 to < 2.2.30affected

References