CVE-2024-38773criticalCWE-89

CVE-2024-38773: falha crítica em Adrian Tobey FormLift for Infusionsoft Web Forms

WordPress formlift plugin <= 7.5.17 - Unauthenticated Blind SQL Injection vulnerability

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar FormLift for Infusionsoft Web Forms

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

43Vexday Risk Score

Corrija em breve. Ela tem exploit funcional público.

ssvc Attendcvss 9.3epss 2.0%
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Adrian Tobey FormLift for Infusionsoft Web Forms allows Blind SQL Injection.This issue affects FormLift for Infusionsoft Web Forms: from n/a through 7.5.17.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L
Produtos afetados
Adrian Tobey · FormLift for Infusionsoft Web Forms
CVEs relacionadas — Adrian Tobey FormLift for Infusionsoft Web Forms

No mesmo produto, das mais perigosas para as menos.

CVE-2025-47654HIGHWordPress FormLift for Infusionsoft Web Forms plugin <= 7.5.20 - Reflected Cross Site Scripting (XSS) vulnerabilityEPSS 0.3%CVE-2025-31434MEDIUMWordPress FormLift for Infusionsoft Web Forms plugin <= 7.5.19 - Cross Site Scripting (XSS) VulnerabilityEPSS 0.2%