CVE-2026-66471

Versions of Accordion up to 3.0.6 are vulnerable to a Subscriber Cross-Site Scripting (XSS) flaw, allowing attackers to inject malicious scripts into web pages viewed by other users. This could lead to unauthorized actions being performed on behalf of users or the exposure of sensitive information. Organizations using affected versions should prioritize patching to mitigate potential exploitation risks.