Approved changes feed: RSS · Atom

cpe:2.3:a:mediaburst:clockwork_sms_notfications:2.0.3:*:*:*:*:wordpress:*:*

part: a version: 2.0.3 update: *

VendorMediaburst (3410679b-7f16-57d2-8c7f-2ad34199bdbd)
ProductClockwork Sms Notfications (e5259b08-3ed4-5a71-8c4e-daf94f687019)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-17780 vulnerable 2026-06-08 05:09:09.898676 Details available
The Clockwork SMS clockwork-test-message.php component has XSS via a crafted "to" parameter in a clockwork-test-message request to wp-admin/admin.php. This component code is found in the following WordPress plugins: Clockwork Free and Paid SMS Notifications 2.0.3, Two-Factor Authentication - Clockwork SMS 1.0.2, Booking Calendar - Clockwork SMS 1.0.5, Contact Form 7 - Clockwork SMS 2.3.0, Fast Secure Contact Form - Clockwork SMS 2.1.2, Formidable - Clockwork SMS 1.0.2, Gravity Forms - Clockwork SMS 2.2, and WP e-Commerce - Clockwork SMS 2.0.5.
Published: 2017-12-20T03:00:00.000Z
Updated: 2024-08-05T20:59:17.852Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.