Input validation vulnerability in Accordion 2.6

The Accordion plugin for WordPress is not secure in versions up to 2.6. Attackers who have access to the website with an editor-level account or higher can inject malicious scripts into webpages. If a user visits one of these pages, the malicious script will execute, allowing the attacker to gain control of the website. To protect against this, be sure to update to the latest version of the plugin.