FAQ / Accordion / Docs – Helpie WordPress FAQ Accordion plugin, CVE-2023-1891

CVE, Research URL: CVE-2023-1891
Home page URL: Security reports for FAQ / Accordion / Docs – Helpie WordPress FAQ Accordion plugin
Application: FAQ / Accordion / Docs – Helpie WordPress FAQ Accordion plugin
Published on: Jun 27, 2023
Research Description: The Accordion & FAQ WordPress plugin before 1.9.9 does not escape various generated URLs, before outputting them in attributes when some notices are displayed, leading to Reflected Cross-Site Scripting
Affected versions: Min -, max 1.9.9.
Status: vulnerable