WordPress formlift plugin <= 7.5.17 - Unauthenticated Blind SQL Injection vulnerability
43Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendcvss 9.3epss 2.0%
exploitation probability
2.0%top 21% of all CVEs
observed exploitation
nono source reports it
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Adrian Tobey FormLift for Infusionsoft Web Forms allows Blind SQL Injection.This issue affects FormLift for Infusionsoft Web Forms: from n/a through 7.5.17.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L
Affected products
Adrian Tobey · FormLift for Infusionsoft Web Forms