3 matches found
CVE-2019-15830
The icegram plugin before 1.10.29 for WordPress has igcatlist XSS...
CVE-2019-15830
The icegram plugin before 1.10.29 for WordPress has igcatlist XSS...
CVE-2019-15830
CVE-2019-15830 affects the WordPress Icegram plugin prior to 1.10.29. The ig_cat_list component is vulnerable to cross-site scripting (XSS). Some sources describe a CSRF to Stored XSS variant. Remediation: upgrade to Icegram 1.10.29 or later (VendorFix). Public descriptions consistently identify ...