CVE-2024-12302

The Icegram Engage WordPress plugin before 3.1.32 does not sanitise and escape some of its Campaign settings, which could allow authors and above to perform Stored Cross-Site Scripting attacks...

CVE-2024-12302

creationtimestamp| type| source ---|---|--- 2025-01-06 06:03:27+00:00| seen| https://infosec.exchange/users/cve/statuses/113779894279783962 2025-01-06 06:15:32+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf2ib65k4k22 2025-01-06 06:40:14+00:00| seen|...