CVE-2023-1891

Accordion & FAQ < 1.9.9 - Reflected XSS

published June 27, 2023

CVSS
—
EPSS
0%
Percentile
40.9
In the wild
Unconfirmed
What it is

The Accordion & FAQ WordPress plugin before 1.9.9 does not escape various generated URLs, before outputting them in attributes when some notices are displayed, leading to Reflected Cross-Site Scripting

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00486 · 40.9th percentile
Published
2023-06-27T13:17Z
EPSS history
Timeline
  • 27 JUN 13:17Z
    Accordion & FAQ < 1.9.9 - Reflected XSS
    cvelistv5