CVE-2023-47779

2023-12-0712:15:07

CWE-601

Patchstack

web.nvd.nist.gov

cve-2023-47779

url redirection

open redirect

crm perks

constant contact

contact form 7

wpforms

elementor

ninja forms

security vulnerability

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

17.0%

JSON

URL Redirection to Untrusted Site (‘Open Redirect’) vulnerability in CRM Perks. Integration for Constant Contact and Contact Form 7, WPForms, Elementor, Ninja Forms.This issue affects Integration for Constant Contact and Contact Form 7, WPForms, Elementor, Ninja Forms: from n/a through 1.1.4.

Affected configurations

Nvd

Vulners

Node

crmperksintegration_for_constant_contact_and_contact_form_7\,_wpforms\,_elementor\,_ninjaRange<1.1.5wordpress

VendorProductVersionCPE
crmperksintegration_for_constant_contact_and_contact_form_7\,_wpforms\,_elementor\,_ninja*cpe:2.3:a:crmperks:integration_for_constant_contact_and_contact_form_7\,_wpforms\,_elementor\,_ninja:*:*:*:*:*:wordpress:*:*

Vendor	Product	Version	CPE
crmperks	integration_for_constant_contact_and_contact_form_7\,_wpforms\,_elementor\,_ninja	*	cpe:2.3:a:crmperks:integration_for_constant_contact_and_contact_form_7\,_wpforms\,_elementor\,_ninja::::::wordpress::*

CNA Affected

[
  {
    "collectionURL": "https://wordpress.org/plugins",
    "defaultStatus": "unaffected",
    "packageName": "cf7-constant-contact",
    "product": "Integration for Constant Contact and Contact Form 7, WPForms, Elementor, Ninja Forms",
    "vendor": "CRM Perks",
    "versions": [
      {
        "changes": [
          {
            "at": "1.1.5",
            "status": "unaffected"
          }
        ],
        "lessThanOrEqual": "1.1.4",
        "status": "affected",
        "version": "n/a",
        "versionType": "custom"
      }
    ]
  }
]

References

patchstack.com/database/vulnerability/cf7-constant-contact/wordpress-integration-for-contact-form-7-and-constant-contact-plugin-1-1-4-open-redirection-vulnerability?_s_id=cve