Smartwp Lightweight_accordion
2 CVEs affecting Smartwp Lightweight_accordion. Latest disclosed: 2024-04-09. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-2436 | Medium | 6.4 | 2024-04-09 | The Lightweight Accordion plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the plugin's shortcode(s) in all versions up to, and including… |
CVE-2023-0373 | Medium | 5.4 | 2023-02-13 | The Lightweight Accordion WordPress plugin before 1.5.15 does not validate and escape some of its block options before outputting them back in a page/post wher… |