WordPress Easy Accordion Plugin <= 2.3.4 is vulnerable to Cross Site Scripting (XSS)

Software Easy Accordion Type Plugin Vulnerable versions = 2.3.4 Fixed in 2.3.5 OWASP Top 10 A7: Cross-Site Scripting XSS Classification Cross Site Scripting XSS CVE CVE-2024-1363 Patch priority Low CVSS severity Low 6.5 Developer Claim ownership PSID b3812cd4e073 Credits Ngô Thiên An ancorn...

CVE-2024-1363

CVE-2024-1363 corresponds to the WordPress plugin Easy Accordion – Best Accordion FAQ Plugin for WordPress. The vulnerability is a Stored Cross-Site Scripting (XSS) due to insufficient input sanitization and output escaping in the accordion_content_source attribute. Affected versions are all up t...