CVE-2024-12302

Icegram Engage < 3.1.32 - Author+ Stored XSS

Medium · published January 6, 2025

CVSS v3.1
6.1
EPSS
0%
Percentile
29.4
In the wild
Unconfirmed
What it is

The Icegram Engage WordPress plugin before 3.1.32 does not sanitise and escape some of its Campaign settings, which could allow authors and above to perform Stored Cross-Site Scripting attacks

The record
Technical detail
CVSS v3.1
6.1 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00367 · 29.4th percentile
Published
2025-01-06T06:00Z
EPSS history
Timeline
  • 06 JAN 06:00Z
    Icegram Engage < 3.1.32 - Author+ Stored XSS
    cvelistv5