Aller au contenu
Se connecter
3.5 Faible

CVE-2025-15692 The Icegram Express WordPress plugin before 5.8.6 does not properly escape a list description setting before…

Description

The Icegram Express WordPress plugin before 5.8.6 does not properly escape a list description setting before outputting it within an HTML attribute, which could allow users with the Administrator role and above to perform Stored Cross-Site Scripting attacks.

Produits et versions touchés

Produit Versions touchées Corrigé en
Icegram Express 5.8 premières → < 5.8.6 5.8.6

Autres CVE de Icegram Express

Les 3 CVE de Icegram Express →
CVE-2025-0671 The Icegram Express WordPress plugin before 5.7.50 does not sanitise and escape some of its Template settings, which… 6.1 Moyenne CVE-2022-3981 The Icegram Express WordPress plugin before 5.5.1 does not properly sanitise and escape a parameter before using it in a… 8.8 Élevée
Suivre cette CVE