Read the docs

icegram

Records71All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical10CVSS 9.0–10.0
CVSS high12CVSS 7.0–8.9

Exploited now

icegram records in CISA KEV

No icegram vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Email Subscribers & Newsletters 25 records HIGH Icegram Engage 10 records MEDIUM Icegram Express 7 records MEDIUM Icegram 1 record LOW Icegram Collect 1 record LOW Popups, Welcome Bar, Optins And Lead Generation Plugin 1 record LOW

Records

1 record in Popups, Welcome Bar, Optins And Lead Generation Plugin · all components

TI-2022-01642 CVE-2022-1776 · GHSA-j7w3-3pcg-w99p

Icegram < 2.1.8 - Contributor+ Stored Cross-Site Scripting

Priority LOW 25

The Popups, Welcome Bar, Optins and Lead Generation Plugin WordPress plugin before 2.1.8 does not sanitize and escape some campaign parameters, which could allow users with a role as low as contributor to perform Stored…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00595 Published 2022-06-27 Fixed in 2.1.8 CWE-79
Open these records in search →