Mediaburst Gravity Forms
3 CVEs affecting Mediaburst Gravity Forms. Latest disclosed: 2023-07-17. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-2701 | Medium | 6.1 | 2023-07-17 | The Gravity Forms WordPress plugin before 2.7.5 does not escape generated URLs before outputting them in attributes, leading to Reflected Cross-Site Scripting… |
CVE-2017-18495 | Medium | 6.1 | 2019-08-13 | The gravity-forms-sms-notifications plugin before 2.4.0 for WordPress has XSS. |
CVE-2017-17780 | Medium | 6.1 | 2017-12-20 | The Clockwork SMS clockwork-test-message.php component has XSS via a crafted "to" parameter in a clockwork-test-message request to wp-admin/admin.php. This com… |