PT-2025-14202 · Unknown+1 · Contact Form 7+1

Published 2025-04-01 · Updated 2025-04-03 · CVE-2025-31821

Positive Technologies (AI Summary)

CVSS v3.1

4.7

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Integration of Zoho CRM and Contact Form 7 versions 1.0.0 through 1.0.6

Description The issue is related to a URL Redirection to Untrusted Site, also known as an 'Open Redirect' vulnerability, in the formsintegrations Integration of Zoho CRM and Contact Form 7. This vulnerability allows phishing attacks.

Recommendations For versions 1.0.0 through 1.0.6, update to a version that contains a fix for this issue to prevent URL redirection to untrusted sites. As a temporary workaround, consider restricting access to the integration of Zoho CRM and Contact Form 7 to minimize the risk of phishing attacks.

Fix

Open Redirect

Weakness Enumeration

CWE-601

Related Identifiers

CVE-2025-31821

Affected Products

Contact Form 7

Zoho Crm

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2025-31821 · Security Note
• https://patchstack.com/database/wordpress/plugin/integration-of-zoho-crm-and-contact-form-7/vulnerability/wordpress-integration-of-zoho-crm-and-contact-form-7-plugin-1-0-6-open-redirection-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/1907709652244009318 · Twitter Post