icegram

Records71All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical10CVSS 9.0–10.0

CVSS high12CVSS 7.0–8.9

Exploited now

icegram records in CISA KEV

No icegram vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Email Subscribers & Newsletters 25 records HIGH Icegram Engage 10 records MEDIUM Icegram Express 7 records MEDIUM Icegram 1 record LOW Icegram Collect 1 record LOW Popups, Welcome Bar, Optins And Lead Generation Plugin 1 record LOW

Records

1 record in Icegram Collect · all components

TI-2023-10497 CVE-2023-25024 · GHSA-5j8j-gxqm-7cm8

WordPress Icegram Collect plugin <= 1.3.8 is vulnerable to Cross Site Scripting (XSS)

LOW 27

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Icegram Icegram Collect plugin <= 1.3.8 versions.

CVSS 3.1MEDIUM 5.9 Network High privileges User interaction EPSS 0.00394 Published 2023-04-07 No fix listed CWE-79

Open these records in search →