Show filters
6 Total Results
Displaying 1-6 of 6
Sort by:
Attacker Value
Unknown
CVE-2023-50843
Disclosure Date: December 28, 2023 (last updated January 05, 2024)
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Clockwork Clockwork SMS Notfications.This issue affects Clockwork SMS Notfications: from n/a through 3.0.4.
0
Attacker Value
Unknown
CVE-2023-2701
Disclosure Date: July 17, 2023 (last updated October 08, 2023)
The Gravity Forms WordPress plugin before 2.7.5 does not escape generated URLs before outputting them in attributes, leading to Reflected Cross-Site Scripting which could be used against high-privileged users such as admin.
0
Attacker Value
Unknown
CVE-2017-18555
Disclosure Date: August 21, 2019 (last updated November 27, 2024)
The booking-sms plugin before 1.1.0 for WordPress has XSS.
0
Attacker Value
Unknown
CVE-2017-18489
Disclosure Date: August 13, 2019 (last updated November 27, 2024)
The contact-form-7-sms-addon plugin before 2.4.0 for WordPress has XSS.
0
Attacker Value
Unknown
CVE-2017-18495
Disclosure Date: August 13, 2019 (last updated November 27, 2024)
The gravity-forms-sms-notifications plugin before 2.4.0 for WordPress has XSS.
0
Attacker Value
Unknown
CVE-2017-17780
Disclosure Date: December 20, 2017 (last updated November 26, 2024)
The Clockwork SMS clockwork-test-message.php component has XSS via a crafted "to" parameter in a clockwork-test-message request to wp-admin/admin.php. This component code is found in the following WordPress plugins: Clockwork Free and Paid SMS Notifications 2.0.3, Two-Factor Authentication - Clockwork SMS 1.0.2, Booking Calendar - Clockwork SMS 1.0.5, Contact Form 7 - Clockwork SMS 2.3.0, Fast Secure Contact Form - Clockwork SMS 2.1.2, Formidable - Clockwork SMS 1.0.2, Gravity Forms - Clockwork SMS 2.2, and WP e-Commerce - Clockwork SMS 2.0.5.
0
