Security Advisory

CVE-2024-12302

6.1
MEDIUM

Vulnerability Description

The Icegram Engage WordPress plugin before 3.1.32 does not sanitise and escape some of its Campaign settings, which could allow authors and above to perform Stored Cross-Site Scripting attacks
Published Date January 6, 2025
Official Source NIST NVD Advisory