PT-2023-17318 · WordPress · Accordion & Faq
CVSS v3.1
6.1
Média
| Vetor | AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
Accordion & FAQ WordPress plugin versions prior to 1.9.9
Description
The issue is related to Reflected Cross-Site Scripting. It occurs because the plugin does not properly escape various generated URLs before outputting them in attributes when some notices are displayed.
Recommendations
For versions prior to 1.9.9, update to version 1.9.9 or later to resolve the issue.
Exploit
Correção
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Accordion & Faq