Icegram Security Vulnerabilities and Issues — Icegram CVE List

Lucene search

IcegramIcegram

6 matches found

CVE•added 2024/06/08 5:15 p.m.•55 views

CVE-2024-21748

Missing Authorization vulnerability in Icegram.This issue affects Icegram: from n/a through 3.1.21.

5.4CVSS4.9AI score0.00079EPSS

CVE•added 2024/08/18 2:15 p.m.•42 views

CVE-2024-43344

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Icegram allows Stored XSS.This issue affects Icegram: from n/a through 3.1.25.

6.5CVSS6.5AI score0.00076EPSS

CVE•added 2021/12/21 9:15 a.m.•41 views

CVE-2021-24941

The Popups, Welcome Bar, Optins and Lead Generation Plugin WordPress plugin before 2.0.5 does not sanitise and escape the message_id parameter of the get_message_action_row AJAX action before outputting it back in an attribute, leading to a reflected Cross-Site Scripting issue

6.1CVSS6AI score0.0021EPSS

CVE•added 2024/08/19 6:15 p.m.•39 views

CVE-2024-43272

Missing Authentication for Critical Function vulnerability in icegram Icegram allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Icegram: from n/a through 3.1.24.

5.3CVSS5.5AI score0.00118EPSS

CVE•added 2025/01/24 6:15 p.m.•39 views

CVE-2025-24542

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in icegram Icegram allows Stored XSS. This issue affects Icegram: from n/a through 3.1.31.

6.5CVSS6.4AI score0.00044EPSS

CVE•added 2024/11/01 3:15 p.m.•36 views

CVE-2024-39625

Missing Authorization vulnerability in icegram Icegram allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Icegram: from n/a through 3.1.24.

5.3CVSS5.3AI score0.00082EPSS