Lucene search

K
wpvulndbAsif Nawaz MinhasWPVDB-ID:4D0C60D1-DB5A-4C4F-9BDB-669975AC7210
HistorySep 10, 2021 - 12:00 a.m.

Easy Accordion < 2.0.22 - Authenticated Stored XSS

2021-09-1000:00:00
Asif Nawaz Minhas
wpscan.com
10
easy accordion
authenticated
stored xss
injection payload
adding items.

EPSS

0.001

Percentile

24.8%

The plugin does not properly sanitize inputs when adding new items to an accordion.

PoC

When adding new items to an accordion, an injection payload of "

EPSS

0.001

Percentile

24.8%

Related for WPVDB-ID:4D0C60D1-DB5A-4C4F-9BDB-669975AC7210