CVE-2021-24283

CVE-2021-24283: Accordion < 2.2.30 - Authenticated Reflected Cross-Site Scripting (XSS)

Vendor Pickplugins
Product Accordion
Weakness CWE-79 · XSS
Published May 14, 2021
Last update August 3, 2024
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

The tab GET parameter of the settings page is not sanitised or escaped when being output back in an HTML attribute, leading to a reflected XSS issue.

Key dates

02Disclosure timeline

May 14, 2021 CVE published
August 3, 2024 Record updated