CVE-2023-2398

Icegram Engage < 3.1.12 - Reflected XSS

published June 12, 2023

CVSS
—
EPSS
0%
Percentile
40.9
In the wild
Unconfirmed
What it is

The Icegram Engage WordPress plugin before 3.1.12 does not escape a parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00486 · 40.9th percentile
Published
2023-06-12T17:28Z
EPSS history
Timeline
  • 12 JUN 17:28Z
    Icegram Engage < 3.1.12 - Reflected XSS
    cvelistv5