Non notée
CVE-2021-24283 The tab GET parameter of the settings page is not sanitised or escaped when being output back in an HTML attribute,…
Description
The tab GET parameter of the settings page is not sanitised or escaped when being output back in an HTML attribute, leading to a reflected XSS issue.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Accordion 2.2 | premières → < 2.2.30 | 2.2.30 |
Autres CVE de Accordion
Les 7 CVE de Accordion →
CVE-2026-116392
Deserialization of Untrusted Data vulnerability in PickPlugins Accordion accordions allows Object Injection.This issue…
7.2
Élevée
CVE-2025-53421
Missing Authorization vulnerability in PickPlugins Accordion accordions allows Exploiting Incorrectly Configured…
6.5
Moyenne
CVE-2025-58678
Missing Authorization vulnerability in PickPlugins Accordion accordions allows Exploiting Incorrectly Configured…
6.5
Moyenne
CVE-2025-32143
Deserialization of Untrusted Data vulnerability in PickPlugins Accordion accordions allows Object Injection.This issue…
8.8
Élevée