PT-2023-30603
CVE-2023-47779
·
Publicado
2023-12-07
·
Atualizado
2023-12-12
Descrição por
CVSS 3.1
6.1
MédiaMétricasAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Integration for Constant Contact and Contact Form 7, WPForms, Elementor, Ninja Forms versions 1.1.4 and earlier
Description
The issue is related to a URL Redirection to Untrusted Site, also known as an 'Open Redirect' vulnerability. This vulnerability affects the Integration for Constant Contact and Contact Form 7, WPForms, Elementor, Ninja Forms plugin.
Recommendations
For versions 1.1.4 and earlier, update to a version later than 1.1.4 to resolve the issue.
As a temporary workaround, consider restricting access to the plugin until a patch is available.
Explorabilidade
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾