Skip to content
CVE PROGRAM SOURCE RECORD4.8 Medium

CVE-2021-36832

WordPress Icegram plugin <= 2.0.2 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Patchstack

Description

WordPress Popups, Welcome Bar, Optins and Lead Generation Plugin – Icegram (versions <= 2.0.2) vulnerable at "Headline" (&message_data[16][headline]) input.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Icegram Popups, Welcome Bar, Optins and Lead Generation Plugin – Icegram

  • <= 2.0.2 to ≤ 2.0.2affected

References