Aller au contenu
Se connecter
6.1 Moyenne

CVE-2025-0671 The Icegram Express WordPress plugin before 5.7.50 does not sanitise and escape some of its Template settings, which…

Description

The Icegram Express WordPress plugin before 5.7.50 does not sanitise and escape some of its Template settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).

Produits et versions touchés

Produit Versions touchées Corrigé en
Icegram Express 5.7 premières → < 5.7.50 5.7.50

Autres CVE de Icegram Express

Les 3 CVE de Icegram Express →
CVE-2025-15692 The Icegram Express WordPress plugin before 5.8.6 does not properly escape a list description setting before… 3.5 Faible CVE-2022-3981 The Icegram Express WordPress plugin before 5.5.1 does not properly sanitise and escape a parameter before using it in a… 8.8 Élevée
Suivre cette CVE