WordPress icegram plugin cross-site scripting vulnerability (CNVD-2021-102791)

WordPress is the Wordpress Foundation’s set of blogging platform developed using the PHP language. The platform supports personal blogging sites on PHP and MySQL servers. WordPress plugin is a WordPress open source application plugin. WordPress icegram plugin in versions prior to 2.0.5 has a cross-site scripting vulnerability, which stems from the plugin does not clean and escape the message id parameter, an attacker can use this vulnerability to execute cross-site scripting attacks.