Veille CVE

Recherche « Unknown Icegram Express »

1 CVE

Critique 0 Élevée 0 Moyenne 0 Faible 1 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « Unknown Icegram Express » ✕
  1. CVE-2025-15692 3.5 Faible

    Unknown Icegram Express

    The Icegram Express WordPress plugin before 5.8.6 does not properly escape a list description setting before outputting it within an HTML attribute, which could allow users with the Administrator role and above to perform Stored Cross-Site Scripting attacks.