← Back

Icecoder

icecoder

Vendor: Icecoder • 6 CVEs

CVEs (6)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Icecoder
1Icecoder
Jun 17, 2026
Jul 26, 2024
N/A· v4
6.1 MEDIUM· v3
N/A· v2
ICEcoder 8.1 is vulnerable to Cross Site Scripting (XSS) via lib/terminal-xhr.php
1Icecoder
1Icecoder
Jun 17, 2026
Jul 26, 2024
N/A· v4
6.1 MEDIUM· v3
N/A· v2
ICEcoder 8.1 is vulnerable to Cross Site Scripting (XSS) via lib/settings-screen.php
1Icecoder
1Icecoder
Jun 17, 2026
Jul 26, 2024
N/A· v4
6.3 MEDIUM· v3
N/A· v2
ICEcoder 8.1 contains a Path Traversal vulnerability via lib/backup-versions-preview-loader.php.
1Icecoder
1Icecoder
Jul 9, 2026
Sep 22, 2022
N/A· v4
7.5 HIGH· v3
N/A· v2
ICEcoder v8.1 allows attackers to execute a directory traversal.
1Icecoder
1Icecoder
Jun 17, 2026
Jan 17, 2022
N/A· v4
4.8 MEDIUM· v3
3.5 LOW· v2
icecoder is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
1Icecoder
1Icecoder
Jun 17, 2026
Jun 8, 2021
N/A· v4
5.4 MEDIUM· v3
3.5 LOW· v2
In ICEcoder 8.0 allows, a reflected XSS vulnerability was identified in the multipe-results.php page due to insufficient sanitization of the _GET['replace'] variable. As a result, arbitrary Javascript code can get execut...Show more
In ICEcoder 8.0 allows, a reflected XSS vulnerability was identified in the multipe-results.php page due to insufficient sanitization of the _GET['replace'] variable. As a result, arbitrary Javascript code can get executed.Show less