538 matches found
CVE-2016-10963
The icegram plugin before 1.9.19 for WordPress has XSS...
CVE-2016-10963
The icegram plugin before 1.9.19 for WordPress has XSS...
CVE-2016-10963
CVE-2016-10963 affects the Icegram WordPress plugin prior to version 1.9.19, with an XSS vulnerability disclosed across multiple sources. The issue is tied to Icegram’s plugin code in WordPress environments (no specific affected file/version details provided in the connected docs beyond the 1.9.1...
CVE-2016-10962
The icegram plugin before 1.9.19 for WordPress has CSRF via the wp-admin/edit.php optionname parameter...
CVE-2016-10962
The vulnerability CVE-2016-10962 affects the Icegram WordPress plugin prior to version 1.9.19. The issue is a Cross-Site Request Forgery (CSRF) vulnerability via the wp-admin/edit.php?option_name parameter, which could enable unauthorized actions within the plugin’s admin context. Affected softwa...
CVE-2016-10962
The icegram plugin before 1.9.19 for WordPress has CSRF via the wp-admin/edit.php optionname parameter...
PT-2019-7755 · WordPress · Icegram
Name of the Vulnerable Software and Affected Versions: icegram plugin versions prior to 1.9.19 Description: The issue concerns a CSRF vulnerability via the option name parameter in the "wp-admin/edit.php" endpoint. This allows for potential unauthorized actions. Recommendations: For versions prio...
CVE-2016-10963: Improper Neutralization of Input During Web Page Generation
The icegram plugin before 1.9.19 for WordPress has XSS...
PT-2019-7756 · Icegram · Icegram Plugin
Name of the Vulnerable Software and Affected Versions: icegram plugin versions prior to 1.9.19 Description: The issue concerns a cross-site scripting XSS problem. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world...
CVE-2016-10962: Cross-Site Request Forgery (CSRF)
The icegram plugin before 1.9.19 for WordPress has CSRF via the wp-admin/edit.php optionname parameter...
WordPress Icegram Plugin < 1.10.29 XSS Vulnerability
The WordPress plugin SPDX-FileCopyrightText: 2019 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.113498";...
WordPress icegram plugin cross-site scripting vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. icegram is a subscription plugin used in it. A cross-site scripting vulnerability exists in WordPress icegram plugin versions prior to...
CVE-2019-15830
The icegram plugin before 1.10.29 for WordPress has igcatlist XSS...
CVE-2019-15830
The icegram plugin before 1.10.29 for WordPress has igcatlist XSS...
Cross site scripting
The icegram plugin before 1.10.29 for WordPress has igcatlist XSS...
CVE-2019-15830
The icegram plugin before 1.10.29 for WordPress has igcatlist XSS...
CVE-2019-15830
The icegram plugin before 1.10.29 for WordPress has igcatlist XSS...
CVE-2019-15830
CVE-2019-15830 affects the WordPress Icegram plugin prior to 1.10.29. The ig_cat_list component is vulnerable to cross-site scripting (XSS). Some sources describe a CSRF to Stored XSS variant. Remediation: upgrade to Icegram 1.10.29 or later (VendorFix). Public descriptions consistently identify ...
PT-2019-14419 · WordPress · Icegram Plugin
Name of the Vulnerable Software and Affected Versions: icegram plugin versions prior to 1.10.29 for WordPress Description: The issue is related to an ig cat list XSS in the icegram plugin for WordPress. Recommendations: For versions prior to 1.10.29, update to version 1.10.29 or later to resolve...