Sign in

Not rated

CVE-2021-24283 The tab GET parameter of the settings page is not sanitised or escaped when being output back in an HTML attribute,…

Description

The tab GET parameter of the settings page is not sanitised or escaped when being output back in an HTML attribute, leading to a reflected XSS issue.

Affected products and versions

Product	Affected versions	Fixed in
Accordion 2.2	earliest → < 2.2.30	2.2.30

The 7 CVEs of Accordion →

CVE-2026-116392 Deserialization of Untrusted Data vulnerability in PickPlugins Accordion accordions allows Object Injection.This issue… 7.2 High CVE-2025-53421 Missing Authorization vulnerability in PickPlugins Accordion accordions allows Exploiting Incorrectly Configured… 6.5 Medium CVE-2025-58678 Missing Authorization vulnerability in PickPlugins Accordion accordions allows Exploiting Incorrectly Configured… 6.5 Medium CVE-2025-32143 Deserialization of Untrusted Data vulnerability in PickPlugins Accordion accordions allows Object Injection.This issue… 8.8 High

Do you use Accordion?

Track this CVE Watch Accordion Check my SBOMs

www.cveye.io/en/cve/CVE-2021-24283

Timeline

Published May 14, 2021
Last modified August 3, 2024

References

wpscan.com wpscan.com

Track this CVE