← CVE Intelligence

CVE-2021-24941

Icegram < 2.0.5 - Reflected Cross-Site Scripting PUBLISHED

Description (CNA)

The Popups, Welcome Bar, Optins and Lead Generation Plugin WordPress plugin before 2.0.5 does not sanitise and escape the message_id parameter of the get_message_action_row AJAX action before outputting it back in an attribute, leading to a reflected Cross-Site Scripting issue

Affected (CNA)

Vendor / productVersions
Unknown / Popups, Welcome Bar, Optins and Lead Generation Plugin – Icegramaffected 2.0.5 before 2.0.5

CWE

CWE-79

References

ADP enrichment

CVE

No English description supplied.