6.5
Medium
CVE-2024-47342 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PickPlugins…
Description
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PickPlugins Accordion accordions allows Stored XSS.This issue affects Accordion: from n/a through <= 2.2.99.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Accordion 2.2 | earliest → 2.2.99 | No fix stated |
Other CVEs of Accordion
The 7 CVEs of Accordion →
CVE-2026-116392
Deserialization of Untrusted Data vulnerability in PickPlugins Accordion accordions allows Object Injection.This issue…
7.2
High
CVE-2025-53421
Missing Authorization vulnerability in PickPlugins Accordion accordions allows Exploiting Incorrectly Configured…
6.5
Medium
CVE-2025-58678
Missing Authorization vulnerability in PickPlugins Accordion accordions allows Exploiting Incorrectly Configured…
6.5
Medium
CVE-2025-32143
Deserialization of Untrusted Data vulnerability in PickPlugins Accordion accordions allows Object Injection.This issue…
8.8
High