CVE-2024-41374: Icecoder

Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days.

ICEcoder 8.1 is vulnerable to Cross Site Scripting (XSS) via lib/settings-screen.php

Affected products

• Icecoder Icecoder: version 8.1 only

Published 2024-07-26. Last modified 2026-06-17.