Input validation vulnerability in Accordion – Multiple Accordion or FAQs Builder 2.0.3

. The Accordions plugin for WordPress is vulnerable to a type of attack called Stored Cross-Site Scripting. This type of attack can allow someone with administrator-level access to inject malicious code into a website. If someone visits a page that has been injected with this malicious code, it could execute the code and cause harm to the visitor. This vulnerability affects versions of the Accordions plugin up to and including 2.0.3 because of a lack of input sanitization and output escaping.

Detected in:

Accordion – Multiple Accordion or FAQs Builder open vulnerable versions: >= * <= 2.0.3

This information is sourced from www.wpvulnerability.com. An open-source database of vulnerabilities maintained by the community. Help us out by submitting vulnerabilities!

Version compare shows which versions have a vulnerability. For example: >= 2.2.8 <= 2.2.21 means:

> from 2.2.8
= including 2.2.8 & 2.2.21
< to 2.2.21

Is this information incorrect? Please leave us a message.