Icegram Engage Security Vulnerabilities and Issues — Icegram Engage CVE List

Lucene search

IcegramIcegram Engage

5 matches found

CVE•added 2024/02/01 11:15 a.m.•82 views

CVE-2023-51532

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Icegram Icegram Engage – WordPress Lead Generation, Popup Builder, CTA, Optins and Email List Building allows Stored XSS.This issue affects Icegram Engage – WordPress Lead Generation, Popup Builder...

6.5CVSS5.5AI score0.00077EPSS

CVE•added 2025/01/06 6:15 a.m.•45 views

CVE-2024-12302

The Icegram Engage WordPress plugin before 3.1.32 does not sanitise and escape some of its Campaign settings, which could allow authors and above to perform Stored Cross-Site Scripting attacks

6.1CVSS5.6AI score0.0001EPSS

CVE•added 2019/09/16 1:15 p.m.•40 views

CVE-2016-10963

The icegram plugin before 1.9.19 for WordPress has XSS.

6.1CVSS6.4AI score0.0019EPSS

CVE•added 2019/09/16 1:15 p.m.•39 views

CVE-2016-10962

The icegram plugin before 1.9.19 for WordPress has CSRF via the wp-admin/edit.php option_name parameter.

6.5CVSS6.6AI score0.0014EPSS

CVE•added 2023/06/12 6:15 p.m.•34 views

CVE-2023-2398

The Icegram Engage WordPress plugin before 3.1.12 does not escape a parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin

6.1CVSS6AI score0.00121EPSS