CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-2701

The Gravity Forms WordPress plugin before 2.7.5 does not escape generated URLs before outputting them in attributes, leading to Reflected Cross-Site Scripting which could be used against high-privileged users such as admin.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.001

EPSS Ranking 28.9%

CVSS Severity

CVSS v3 Score 6.1

References

Products affected by CVE-2023-2701

Mediaburst » Gravity Forms » Version: N/A

cpe:2.3:a:mediaburst:gravity_forms:-
Mediaburst » Gravity Forms » Version: 1.0.0

cpe:2.3:a:mediaburst:gravity_forms:1.0.0
Mediaburst » Gravity Forms » Version: 1.0.1

cpe:2.3:a:mediaburst:gravity_forms:1.0.1
Mediaburst » Gravity Forms » Version: 2.0.0

cpe:2.3:a:mediaburst:gravity_forms:2.0.0
Mediaburst » Gravity Forms » Version: 2.0.1

cpe:2.3:a:mediaburst:gravity_forms:2.0.1
Mediaburst » Gravity Forms » Version: 2.0.2

cpe:2.3:a:mediaburst:gravity_forms:2.0.2
Mediaburst » Gravity Forms » Version: 2.0.3

cpe:2.3:a:mediaburst:gravity_forms:2.0.3
Mediaburst » Gravity Forms » Version: 2.1.0

cpe:2.3:a:mediaburst:gravity_forms:2.1.0
Mediaburst » Gravity Forms » Version: 2.1.1

cpe:2.3:a:mediaburst:gravity_forms:2.1.1
Mediaburst » Gravity Forms » Version: 2.1.2

cpe:2.3:a:mediaburst:gravity_forms:2.1.2
Mediaburst » Gravity Forms » Version: 2.2

cpe:2.3:a:mediaburst:gravity_forms:2.2
Mediaburst » Gravity Forms » Version: 2.4.0

cpe:2.3:a:mediaburst:gravity_forms:2.4.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2023-2701

Products

Pricing

Contact Us