CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N
What the vulnerability does
URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks WP Gravity Forms FreshDesk Plugin gf-freshdesk allows Phishing.This issue affects WP Gravity Forms FreshDesk Plugin: from n/a through <= 1.3.5.
Explanation of Vulnerability in Simple Terms
The WP Gravity Forms FreshDesk Plugin versions 1.3.5 and earlier contain an open redirect vulnerability. An attacker can craft a malicious link that redirects users to an external website after they interact with the plugin. The vulnerability requires user interaction and affects the scope beyond the plugin itself. Update to a version newer than 1.3.5 to resolve this issue.
What an attacker can do
Redirect site visitors to a malicious external website via a crafted link.
Potential impact on your site
Users may be tricked into visiting phishing or malware sites, damaging site reputation and user trust.
Conditions required to exploit
The victim must click a link or visit a page containing the malicious redirect.
Key dates
External resources
