Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

4 records

Release: Email Subscribers by Icegram Express 5.7.45 Clear all filters
TI-2024-11661 CVE-2024-12568 · GHSA-6qmq-j47c-v4fj

Email Subscribers < 5.7.45 - Admin+ Stored XSS

Priority MEDIUM 55

The Email Subscribers by Icegram Express WordPress plugin before 5.7.45 does not sanitise and escape some of its Workflow settings, which could allow high privilege users such as admin to perform Stored Cross-Site Script…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00312 Published 2025-01-13 Fixed in 5.7.45 CWE-79
TI-2024-11660 CVE-2024-12567 · GHSA-r7m8-pv7c-r2ph

Email Subscribers < 5.7.45 - Admin+ Stored XSS

Priority MEDIUM 55

The Email Subscribers by Icegram Express WordPress plugin before 5.7.45 does not sanitise and escape some of its form settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00312 Published 2025-01-13 Fixed in 5.7.45 CWE-79
TI-2024-11659 CVE-2024-12566 · GHSA-cw8x-p7hf-968r

Email Subscribers < 5.7.45 - Admin+ Stored XSS

Priority MEDIUM 55

The Email Subscribers by Icegram Express WordPress plugin before 5.7.45 does not sanitise and escape some of form settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting atta…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00312 Published 2025-01-13 Fixed in 5.7.45 CWE-79
TI-2024-10783 CVE-2024-11636 · GHSA-hpcp-qr34-rj6h

Email Subscribers < 5.7.45 - Admin+ Stored XSS

Priority MEDIUM 55

The Email Subscribers by Icegram Express WordPress plugin before 5.7.45 does not sanitise and escape some of its Text Block options, which could allow high privilege users such as admin to perform Stored Cross-Site Scrip…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00332 Published 2025-01-13 Fixed in 5.7.45 CWE-20