Show filters
8 Total Results
Displaying 1-8 of 8
Sort by:
Attacker Value
Unknown
CVE-2024-12302
Disclosure Date: January 06, 2025 (last updated January 07, 2025)
The Icegram Engage WordPress plugin before 3.1.32 does not sanitise and escape some of its Campaign settings, which could allow authors and above to perform Stored Cross-Site Scripting attacks
0
Attacker Value
Unknown
CVE-2023-51532
Disclosure Date: February 01, 2024 (last updated February 07, 2024)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Icegram Icegram Engage – WordPress Lead Generation, Popup Builder, CTA, Optins and Email List Building allows Stored XSS.This issue affects Icegram Engage – WordPress Lead Generation, Popup Builder, CTA, Optins and Email List Building: from n/a through 3.1.19.
0
Attacker Value
Unknown
CVE-2023-52119
Disclosure Date: January 05, 2024 (last updated January 12, 2024)
Cross-Site Request Forgery (CSRF) vulnerability in Icegram Icegram Engage – WordPress Lead Generation, Popup Builder, CTA, Optins and Email List Building.This issue affects Icegram Engage – WordPress Lead Generation, Popup Builder, CTA, Optins and Email List Building: from n/a through 3.1.18.
0
Attacker Value
Unknown
CVE-2023-2398
Disclosure Date: June 12, 2023 (last updated October 08, 2023)
The Icegram Engage WordPress plugin before 3.1.12 does not escape a parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
0
Attacker Value
Unknown
CVE-2021-36832
Disclosure Date: August 17, 2021 (last updated February 23, 2025)
WordPress Popups, Welcome Bar, Optins and Lead Generation Plugin – Icegram (versions <= 2.0.2) vulnerable at "Headline" (&message_data[16][headline]) input.
0
Attacker Value
Unknown
CVE-2016-10963
Disclosure Date: September 16, 2019 (last updated January 11, 2024)
The icegram plugin before 1.9.19 for WordPress has XSS.
0
Attacker Value
Unknown
CVE-2016-10962
Disclosure Date: September 16, 2019 (last updated January 11, 2024)
The icegram plugin before 1.9.19 for WordPress has CSRF via the wp-admin/edit.php option_name parameter.
0
Attacker Value
Unknown
CVE-2019-15830
Disclosure Date: August 30, 2019 (last updated January 11, 2024)
The icegram plugin before 1.10.29 for WordPress has ig_cat_list XSS.
0
