Read the docs

icegram

Records71All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical10CVSS 9.0–10.0
CVSS high12CVSS 7.0–8.9

Exploited now

icegram records in CISA KEV

No icegram vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Email Subscribers & Newsletters 25 records HIGH Icegram Engage 10 records MEDIUM Icegram Express 7 records MEDIUM Icegram 1 record LOW Icegram Collect 1 record LOW Popups, Welcome Bar, Optins And Lead Generation Plugin 1 record LOW

Records

1 record in Icegram · all components

TI-2021-07220 CVE-2021-24941 · GHSA-mwhh-vwcq-vm7h

Icegram < 2.0.5 - Reflected Cross-Site Scripting

Priority LOW 29

The Popups, Welcome Bar, Optins and Lead Generation Plugin WordPress plugin before 2.0.5 does not sanitise and escape the message_id parameter of the get_message_action_row AJAX action before outputting it back in an att…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00827 Published 2021-12-21 Fixed in 2.0.5 CWE-79
Open these records in search →