CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N
What the vulnerability does
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks WP Gravity Forms Salesforce gf-salesforce-crmperks allows Phishing.This issue affects WP Gravity Forms Salesforce: from n/a through <= 1.4.7.
Explanation of Vulnerability in Simple Terms
The WP Gravity Forms Salesforce plugin through version 1.4.7 contains an open redirect vulnerability. An attacker can craft a malicious link that redirects users to an external website after they interact with the plugin. The vulnerability requires user interaction and affects the scope beyond the plugin itself. Update to a version newer than 1.4.7.
What an attacker can do
Redirect users to a malicious external website via a crafted link.
Potential impact on your site
Users may be tricked into visiting phishing or malware sites, damaging site reputation and user trust.
Conditions required to exploit
User must click a malicious link or visit a page containing the redirect.
Key dates
External resources
