Vulnerabilities in ice00

3 results

CVE-2026-101924HIGHNewStatPress <= 1.4.5 - Unauthenticated Stored Cross-Site Scripting via 'urlrequested' Attribute via Query StringEPSS 0.3%CVE-2026-100153HIGHNewStatPress <= 1.4.5 - Unauthenticated Stored Cross-Site Scripting via URL Request Tracking (urlrequested field)EPSS 0.3%CVE-2025-13747MEDIUMNewStatPress <= 1.4.3 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.2%