Icegram

Icegram develops a focused suite of email marketing and customer engagement products, including its flagship Email Subscribers & Newsletters, Engage, Express, and Collect platforms, which serve as plugins and hosted solutions for building and managing customer communications. Despite its narrow product portfolio, the vendor ranks among the more prominent vulnerability disclosures in the landscape, driven by vulnerabilities that skew toward serious outcomes and a moderate tendency toward public exploit availability. The recurring weakness classes—cross-site scripting, SQL injection, CSRF, missing authorization, and exposure of sensitive information—reflect the web-application and database-interaction surface typical of email-marketing and form-collection software, where improper input handling and access control directly expose customer data and platform integrity. Defenders should prioritize patches for Icegram deployments given the elevation in critical-severity findings and the email subscriber databases these products typically access; current exploitation activity and exposure counts are shown alongside this summary.