CVE-2017-18495 – Clockwork SMS Notfications < 2.4.2 - Cross-Site Scripting

https://notcve.org/view.php?id=CVE-2017-18495

The gravity-forms-sms-notifications plugin before 2.4.0 for WordPress has XSS. El complemento gravity-forms-sms-notifications anterior de 2.4.0 para WordPress tiene XSS. The gravity-forms-sms-notifications plugin before 2.4.2 for WordPress has XSS. • https://wordpress.org/plugins/gravity-forms-sms-notifications/#developers • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •