CVE-2021-24283

Accordion < 2.2.30 - Authenticated Reflected Cross-Site Scripting (XSS) PUBLISHED

Description (CNA)

The tab GET parameter of the settings page is not sanitised or escaped when being output back in an HTML attribute, leading to a reflected XSS issue.

Vendor / product	Versions
PickPlugins / Accordion	affected 2.2.30 before 2.2.30

CWE-79

CVE

No English description supplied.