← All advisories

Unrated severityNVD Advisory· Published Apr 7, 2023· Updated Apr 28, 2026

WordPress Icegram Collect plugin <= 1.3.8 is vulnerable to Cross Site Scripting (XSS)

CVE-2023-25024

Description

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Icegram Icegram Collect plugin <= 1.3.8 versions.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2

Icegram/Icegram Collectllm-fuzzy2 versions
<=1.3.8+ 1 more
- (no CPE)range: <=1.3.8
- (no CPE)range: n/a

Patches

Vulnerability mechanics

References

1

patchstack.com/database/vulnerability/icegram-rainmaker/wordpress-icegram-collect-easy-form-lead-collection-and-subscription-plugin-plugin-1-3-8-cross-site-scripting-xssmitrevdb-entry

News mentions

0

No linked articles in our index yet.