6.1
Moyenne
CVE-2024-12302 The Icegram Engage WordPress plugin before 3.1.32 does not sanitise and escape some of its Campaign settings, which…
Description
The Icegram Engage WordPress plugin before 3.1.32 does not sanitise and escape some of its Campaign settings, which could allow authors and above to perform Stored Cross-Site Scripting attacks
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Icegram Engage 3.1 | premières → < 3.1.32 | 3.1.32 |
Autres CVE de Icegram Engage
Les 4 CVE de Icegram Engage →
CVE-2024-13482
The Icegram Engage WordPress plugin before 3.1.32 does not sanitise and escape some of its settings, which could…
4.8
Moyenne
CVE-2024-13486
The Icegram Engage WordPress plugin before 3.1.32 does not sanitise and escape some of its settings, which could…
4.8
Moyenne
CVE-2023-2398
The Icegram Engage WordPress plugin before 3.1.12 does not escape a parameter before outputting it back in an attribute,…
Non notée