| Package | Affected versions | Patched versions |
|---|---|---|
| accordion | < 2.2.30 | 2.2.30 |
The tab GET parameter of the settings page is not sanitised or escaped when being output back in an HTML attribute, leading to a reflected XSS issue.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free