CVE-2024-12302 — Icegram Engage < 3.1.32 - Author+ Stored XSS
The Icegram Engage WordPress plugin before 3.1.32 does not sanitise and escape some of its Campaign settings, which could allow authors and above to perform Stored Cross-Site S…
Published: 2025-01-06 · CVSS: 6.1 · CVSS 3.1
The Icegram Engage WordPress plugin before 3.1.32 does not sanitise and escape some of its Campaign settings, which could allow authors and above to perform Stored Cross-Site Scripting attacks
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7