CVE-2021-32106: Icecoder

Medium severity, CVSS 5.4. EPSS: 0.9% chance of exploitation in the next 30 days.

In ICEcoder 8.0 allows, a reflected XSS vulnerability was identified in the multipe-results.php page due to insufficient sanitization of the _GET['replace'] variable. As a result, arbitrary Javascript code can get executed.

Affected products

• Icecoder Icecoder: version 8.0 only

Published 2021-06-08. Last modified 2026-06-17.