Contact Form 7 < 5.9.5 - Unauthenticated Open Redirect

2024-06-0500:00:00

William Bastos - cHoR4o

contact form

footer widget

disable javascript

open redirect

exploit

6.6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

JSON

Description The plugin has an open redirect that allows an attacker to utilize a false URL and redirect to the URL of their choosing.

1. Add a form to a footer widget area
2. Disable JavaScript
3. Access the URL: `https://example.com/%0a/google.com`
4. Fill out the form and submit
5. The browser will be redirected to `google.com`