CVE-2024-12302 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

The Icegram Engage WordPress plugin before 3.1.32 does not sanitise and escape some of its Campaign settings, which could allow authors and above to perform St…
Medium CVSS: 6.1

CVE-2024-12302

The Icegram Engage WordPress plugin before 3.1.32 does not sanitise and escape some of its Campaign settings, which could allow authors and above to perform Stored Cross-Site Scripting attacks
Vendor
Icegram
Product
Icegram Engage
CWE
CWE-79
Yayın Tarihi
2025-01-06 06:15:06
Güncelleme
2025-05-14 14:14:28
Source Identifier
contact@wpscan.com
KEV Date Added
-

Kategoriler

CWE-79 Icegram Engage MEDIUM Icegram 2025

Referanslar

https://wpscan.com/vulnerability/ed860dac-8c4a-482f-8826-31f1a894b6ce/