CVE-2021-36832

概要

参考情報

• patchstack.com/database/vulnerability/icegram/wordpress-icegram-plugin-2-0-2-authenticated-stored-cross-site-scripting-xss-vulnerability · Third Party Advisory
• wordpress.org/plugins/icegram · Product

icegram engage のその他の脆弱性

• CVE-2024-13486中 4.8The Icegram Engage WordPress plugin before 3.1.32 does not sanitise and escape some of its settings, which could allow high privilege users…
• CVE-2024-13482中 4.8The Icegram Engage WordPress plugin before 3.1.32 does not sanitise and escape some of its settings, which could allow high privilege users…
• CVE-2024-12302中 6.1The Icegram Engage WordPress plugin before 3.1.32 does not sanitise and escape some of its Campaign settings, which could allow authors and…
• CVE-2023-51532中 5.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Icegram Icegram Engage – WordPress Lea…
• CVE-2023-52119高 8.8Cross-Site Request Forgery (CSRF) vulnerability in Icegram Icegram Engage – WordPress Lead Generation, Popup Builder, CTA, Optins and Email …