CVE-2024-22300: WordPress Icegram Express plugin <= 5.7.11 - Reflected Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Icegram Email Subscribers & Newsletters allows Reflected XSS.This issue affects Email Subscribers & Newsletters: from n/a through 5.7.11.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-22300?
CVE-2024-22300 is classified as a reflected Cross-site Scripting (XSS) vulnerability with a severity that can lead to unauthorized actions on behalf of the user.
How do I fix CVE-2024-22300?
To fix CVE-2024-22300, update the Icegram Email Subscribers & Newsletters plugin to version 5.7.12 or later.
Which versions of Icegram Email Subscribers & Newsletters are affected by CVE-2024-22300?
CVE-2024-22300 affects Icegram Email Subscribers & Newsletters versions up to and including 5.7.11.
What type of vulnerability is CVE-2024-22300?
CVE-2024-22300 is an Improper Neutralization of Input During Web Page Generation leading to a Cross-site Scripting (XSS) vulnerability.
Can attackers exploit CVE-2024-22300 without user interaction?
Yes, attackers can exploit CVE-2024-22300 to execute scripts without user interaction through crafted URLs.