2 matches found
CVE-2023-4890: Improper Neutralization of Input During Web Page Generation
The JQuery Accordion Menu Widget plugin for WordPress is vulnerable to Stored Cross-Site Scripting via 'dcwp-jquery-accordion' shortcode in versions up to, and including, 3.1.2 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for...
6.4CVSS6.8AI score0.00514EPSS
SaveExploits0References2
PT-2023-31003
Name of the Vulnerable Software and Affected Versions JQuery Accordion Menu Widget for WordPress versions up to, and including, 3.1.2 Description The issue is related to Stored Cross-Site Scripting via the 'dcwp-jquery-accordion' shortcode due to insufficient input sanitization and output escapin...
6.4CVSS6.1AI score0.00514EPSS
SaveExploits0References7
20