Easy Accordion Security Vulnerabilities and Issues — Easy Accordion CVE List

Lucene search

TecheartyEasy Accordion

3 matches found

cve•added 2023/01/16 4:15 p.m.•69 views

CVE-2022-4487

The Easy Accordion WordPress plugin before 2.2.0 does not validate and escape some of its shortcode attributes before outputting them back in the page, which could allow users with a role as low as contributor to perform Stored Cross-Site Scripting attacks which could be used against high privilege...

5.4CVSS5.3AI score0.00144EPSS

cve•added 2024/03/13 4:15 p.m.•53 views

CVE-2024-1363

The Easy Accordion – Best Accordion FAQ Plugin for WordPress plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'accordion_content_source' attribute in all versions up to, and including, 2.3.4 due to insufficient input sanitization and output escaping. This makes it possible ...

6.4CVSS5.8AI score0.00144EPSS

cve•added 2021/10/11 11:15 a.m.•44 views

CVE-2021-24576

The Easy Accordion WordPress plugin before 2.0.22 does not properly sanitize inputs when adding new items to an accordion.

5.4CVSS5.4AI score0.0018EPSS