CVE-2024-38773
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Adrian Tobey FormLift for Infusionsoft Web Forms allows Blind SQL Injection.This issue affects FormLift for Infusionsoft Web Forms: from n/a through 7.5.17.
- Score
- CVSS 3.1 9.8 Critical
- Status
- Modified - audit@patchstack.com
- Published
- 2024-07-22
- Last modified
- 2026-04-28
- Weaknesses
- CWE-89
Affected products
- Formlift For Infusionsoft Web Forms (Adrian Tobey)
- Formlift For Infusionsoft Web Forms (Adriantobey)
- Formlift For Infusionsoft Web Forms (Formlift)
References
- https://patchstack.com/database/vulnerability/formlift/wordpress-formlift-plugin-7-5-17-unauthenticated-blind-sql-injec…
