CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N
What the vulnerability does
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in PluginOps MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder.This issue affects MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder: from n/a through 4.0.9.3.
Explanation of Vulnerability in Simple Terms
PluginOps form and popup builder plugins (MailChimp Subscribe Form, Optin Builder, PopUp Builder, Form Builder) versions up to 4.0.9.3 contain an open redirect vulnerability. An attacker can craft a malicious link that redirects users to an external website after they interact with the form. The vulnerability requires user interaction and affects the scope beyond the plugin itself.
What an attacker can do
Redirect site visitors to a malicious external website via a crafted link.
Potential impact on your site
Attackers can use your site to phish visitors or distribute malware by redirecting them off-site.
Conditions required to exploit
Victim must click a malicious link or visit a page containing the affected form.
Key dates
External resources
Related vulnerabilities
