Stored Cross-Site Scripting Vulnerability in Easy Accordion FAQ Plugin for WordPress
CVE-2024-1363
5.4MEDIUM
Key Information:
- Vendor
Wordpress
- Vendor
- CVE Published:
- 13 March 2024
What is CVE-2024-1363?
The Easy Accordion – Best Accordion FAQ Plugin for WordPress is susceptible to Stored Cross-Site Scripting (XSS) due to inadequate input sanitization and output escaping within the 'accordion_content_source' attribute. This vulnerability enables authenticated users, possessing contributor-level access or higher, to inject malicious web scripts. These scripts can execute whenever a user accesses the compromised pages, posing significant security risks to site users.
Affected Version(s)
Easy Accordion – Best Accordion FAQ Plugin for WordPress * <= 2.3.4