Lucene search
Asif Nawaz Minhas (Patchstack Red Team)PATCHSTACK:2E2270D1399874E99D4C899324808FE7HistoryAug 17, 2021 - 12:00 a.m.
WordPress Icegram plugin <= 2.0.2 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability
2021-08-1700:00:00
Asif Nawaz Minhas (Patchstack Red Team)
patchstack.com
7
0.001 Low
EPSS
Percentile
19.4%
Authenticated Stored Cross-Site Scripting (XSS) vulnerability discovered by Asif Nawaz Minhas in WordPress Icegram plugin (versions <= 2.0.2). Vulnerable at “Headline” (&message_data[16][headline]) input.
Solution
Update the WordPress Icegram plugin to the latest available version (at least 2.0.3).
Related
cvelist
cvelist
wpvulndb
wpvulndb
Icegram < 2.0.3 - Admin+ Stored Cross-Site Scripting
2021-08-17 00:00:00
cve
cve
CVE-2021-36832
2021-10-19 15:15:07
prion
prion
Input validation
2021-10-19 15:15:00
nvd
nvd
CVE-2021-36832
2021-10-19 15:15:07