CVE-2021-24283

MEDIUM 5.4CVE-2021-24283 · Published 14/05/2021 · updated 17/06/2026

In short

CVE-2021-24283 is a MEDIUM (CVSS 5.4) vulnerability affecting accordion (pickplugins).
Chance of exploitation in the next 30 days (EPSS): 0.62%, higher than 49.9% of all vulnerabilities.
Fix: update to 2.2.30 or later.

Package	Affected versions	Patched versions
accordion pickplugins	`< 2.2.30`	`2.2.30`

The tab GET parameter of the settings page is not sanitised or escaped when being output back in an HTML attribute, leading to a reflected XSS issue.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.