Integration of Zoho CRM and Contact Form 7 <= 1.0.6 - Open Redirect
mediumThe Integration of Zoho CRM and Contact Form 7 plugin for WordPress is vulnerable to Open Redirect in all versions up to, and including, 1.0.6. This is due to insufficient validation on a redirect url. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites if they can succ...
- CVSS:
- 6.1
- Affected:
- up to 1.0.6
- Fix:
- No patched version reported
- Disclosed:
- Apr 1, 2025