Skip to content

Product

mediaburst gravity forms vulnerabilities

3 published CVES affecting mediaburst gravity forms, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
3
Critical
0
High
0
Medium
3
Low
0
Unscored
0
CISA KEV
0

Latest mediaburst gravity forms CVEs

Newest publication first

  1. CVE-2023-2701 Gravity Forms < 2.7.5 - Reflected XSS

    Published
    MediumCVSS 6.1 EPSS 0.49%

    The Gravity Forms WordPress plugin before 2.7.5 does not escape generated URLs before outputting them in attributes, leading to Reflected Cross-Site Scripting which could be used against high-privileged users such as admin.

  3. CVE-2017-17780 Clockwork SMS Plugins - Multiple Versions - Cross-Site Scripting

    Published
    MediumCVSS 6.1 EPSS 0.95%

    The Clockwork SMS clockwork-test-message.php component has XSS via a crafted "to" parameter in a clockwork-test-message request to wp-admin/admin.php. This component code is found in the following WordPress plugins: Clockwork Free and Paid SMS Notifications 2.0.3, Two-Factor Auth...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.