Vulnerabilities and security researches forformlift formlift

Jul 23, 2024

CVE, Research URL: CVE-2024-38773
Home page URL: Security reports for FormLift for Infusionsoft Web Forms
Application: FormLift for Infusionsoft Web Forms
Date: Jul 22, 2024
Research Description: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Adrian Tobey FormLift for Infusionsoft Web Forms allows Blind SQL Injection.This issue affects FormLift for Infusionsoft Web Forms: from n/a through 7.5.17.
Affected versions: Min -, max -.
Status: vulnerable

Apr 03, 2025

CVE, Research URL: CVE-2025-31434
Home page URL: Security reports for FormLift for Infusionsoft Web Forms
Application: FormLift for Infusionsoft Web Forms
Date: Mar 28, 2025
Research Description: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Adrian Tobey FormLift for Infusionsoft Web Forms allows Stored XSS. This issue affects FormLift for Infusionsoft Web Forms: from n/a through 7.5.19.
Affected versions: Min -, max -.
Status: vulnerable