← CVE Intelligence

CVE-2024-12302

Icegram Engage < 3.1.32 - Author+ Stored XSS PUBLISHED

Description (CNA)

The Icegram Engage WordPress plugin before 3.1.32 does not sanitise and escape some of its Campaign settings, which could allow authors and above to perform Stored Cross-Site Scripting attacks

Affected (CNA)

Vendor / productVersions
Unknown / Icegram Engageaffected 0 before 3.1.32

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.