Icegram Engage – WordPress Lead Generation, Popup Builder, CTA, Optins and Email List Building, CVE-2021-24941
- CVE, Research URL
- Home page URL
- Application
-
Icegram Engage – WordPress Lead Generation, Popup Builder, CTA, Optins and Email List Building
- Published on
- Dec 21, 2021
- Research Description
- The Popups, Welcome Bar, Optins and Lead Generation Plugin WordPress plugin before 2.0.5 does not sanitise and escape the message_id parameter of the get_message_action_row AJAX action before outputting it back in an attribute, leading to a reflected Cross-Site Scripting issue
- Affected versions
-
Min -, max 2.0.5.
- Status
-
vulnerable