CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N
What the vulnerability does
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks WP Gravity Forms Dynamics CRM gf-dynamics-crm allows Phishing.This issue affects WP Gravity Forms Dynamics CRM: from n/a through <= 1.1.4.
Explanation of Vulnerability in Simple Terms
WP Gravity Forms Dynamics CRM versions 1.1.4 and earlier contain an open redirect vulnerability. An attacker can craft a malicious link that redirects users to an external website after they interact with the plugin. The vulnerability requires user interaction and affects the scope beyond the plugin itself. Update to a version newer than 1.1.4 to resolve this issue.
What an attacker can do
Redirect users to a malicious external website via a crafted link.
Potential impact on your site
Users may be tricked into visiting phishing or malware sites, damaging site reputation and user trust.
Conditions required to exploit
User must click a malicious link; no authentication required.
Key dates
External resources
Related vulnerabilities
