title: WordPress Integration for WooCommerce and Zoho CRM Plugin < 1.3.7 is vulnerable to Open Redirection
description: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in CRM Perks Integration for WooCommerce and Zoho CRM, Books, Invoice, Inventory, Bigin.This issue affects Integration for WooCommerce and Zoho CRM, Books, Invoice, Inventory, Bigin: from n/a before 1.3.7.
problem types: CWE-601 URL Redirection to Untrusted Site ('Open Redirect')
affected:
{
collectionURL: https://wordpress.org/plugins
defaultStatus: unaffected
packageName: woo-zoho
product: Integration for WooCommerce and Zoho CRM, Books, Invoice, Inventory, Bigin
vendor: CRM Perks
versions:
changes: [at: 1.3.7, status: unaffected], lessThan: 1.3.7, status: affected, version: n/a, versionType: custom
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: NONE
baseScore: 4.7
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: NONE
privilegesRequired: NONE
scope: CHANGED
userInteraction: REQUIRED
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:N/A:N
version: 3.1
]
format: CVSS
scenarios: GENERAL
solutions: Update to 1.3.7 or a higher version.