Description
The tab GET parameter of the settings page is not sanitised or escaped when being output back in an HTML attribute, leading to a reflected XSS issue.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| PickPlugins | Accordion | 2.2.30 – < 2.2.30 | 2.2.30 |