CVE-2026-66471

MediumCVSS 6.5

Published: 13/08/2026(UTC)Updated: 14/08/2026(UTC)Translated: 13/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.21%

12th percentile - higher than 12% of all known CVEs

Subscriber-level Cross Site Scripting (XSS) vulnerability in Accordion plugin versions up to and including 3.0.6.

A subscriber can inject malicious scripts that execute in other users' browsers, potentially leading to session theft or other attacks.

Update the Accordion plugin to a version newer than 3.0.6.

Original NVD description (English source)

Subscriber Cross Site Scripting (XSS) in Accordion <= 3.0.6 versions.