Cross-Site Scripting Vulnerability in Turn Yoast SEO FAQ Block to Accordion by yasir129

CVE-2026-24591

What is CVE-2026-24591?

The Turn Yoast SEO FAQ Block to Accordion plugin contains a Cross-Site Scripting (XSS) vulnerability due to improper neutralization of user input during web page generation. This flaw allows an attacker to inject malicious scripts that get stored and run in the context of other users' sessions. As a result, user data can be compromised, leading to session hijacking or other malicious activities. Users of affected versions (1.0.6 and below) are advised to update to the latest version to mitigate this risk.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References