Skip to content
OpenAdvisories
Medium · 6.5 CVE-2023-51532 EUVD-2023-56244GHSA-jv9f-872m-gv5x

WordPress Icegram Plugin <= 3.1.19 is vulnerable to Cross Site Scripting (XSS)

Published Feb 1, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Icegram Product: Icegram Engage – WordPress Lead Generation, Popup Builder, CTA, Optins and Email List Building Category: Web / CMS

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Icegram Icegram Engage – WordPress Lead Generation, Popup Builder, CTA, Optins and Email List Building allows Stored XSS.This issue affects Icegram Engage – WordPress Lead Generation, Popup Builder, CTA, Optins and Email List Building: from n/a through 3.1.19.

Affected products

VendorProductAffectedFixed
Icegram Icegram Engage – WordPress Lead Generation, Popup Builder, CTA, Optins and Email List Building ≤ 3.1.19 —

References