Non notée
CVE-2023-2398 The Icegram Engage WordPress plugin before 3.1.12 does not escape a parameter before outputting it back in an attribute,…
Description
The Icegram Engage WordPress plugin before 3.1.12 does not escape a parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Icegram Engage 3.1 | premières → < 3.1.12 | 3.1.12 |
Autres CVE de Icegram Engage
Les 4 CVE de Icegram Engage →
CVE-2024-13482
The Icegram Engage WordPress plugin before 3.1.32 does not sanitise and escape some of its settings, which could…
4.8
Moyenne
CVE-2024-13486
The Icegram Engage WordPress plugin before 3.1.32 does not sanitise and escape some of its settings, which could…
4.8
Moyenne
CVE-2024-12302
The Icegram Engage WordPress plugin before 3.1.32 does not sanitise and escape some of its Campaign settings, which…
6.1
Moyenne