PT-2018-15098

CVE-2018-19796

·

Published

2018-12-03

·

Updated

2020-03-03

Description by

CVSS 3.1
6.1
Medium
MetricsAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions Ninja Forms plugin versions prior to 3.3.19.1
Description The issue is related to an open redirect that allows remote attackers to redirect a user. This is achieved via the "lib/StepProcessing/step-processing.php" submissions download page, specifically through a redirect parameter.
Recommendations For versions prior to 3.3.19.1, update to version 3.3.19.1 or later to resolve the issue.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-601: URL Redirection to Untrusted Site (\'Open Redirect\')
Related identifiers
CVE-2018-19796
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com