Vulnerability Bulletins

Icegram Persistent Cross-Site Scripting

   
Affected software Wordpress
 
http://feedproxy.google.com/~r/sucuri/blog/~3/f5r1d599CaA/icegram-persistent-cross-site-scripting.html Icegram is a plugin that helps you collect email addresses for your newsletter. Other features include light-box popup offers, header action bars, toast notifications, and slide-in messengers. Versions 1.10.28.2 and lower are affected by a persistent Cross-Site Scripting in the admin area. This plugin has over 40,000 installations and any attacker with a subscriber […]

More info:

http://feedproxy.google.com/~r/sucuri/blog/~3/f5r1d599CaA/icegram-persistent-cross-site-scripting.html