FormLift for Infusionsoft Web Forms vulnerabilities

2 known vulnerabilities in FormLift for Infusionsoft Web Forms from Adrian Tobey. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  FormLift for Infusionsoft Web Forms: Improper Neutralization of Input During Web Page Generation

  CVE-2025-47654Jun 27, 2025Adrian Tobey

  Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Adrian Tobey FormLift for Infusionsoft Web Forms formlift allows Reflected XSS.This issue affects FormLift for Infusionsoft Web Forms: from n/a through <= 7.5

• 9.8 Critical severity

  FormLift for Infusionsoft Web Forms: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2024-38773Jul 22, 2024Adrian TobeyEPSS 1.99%

  Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Adrian Tobey FormLift for Infusionsoft Web Forms allows Blind SQL Injection.This issue affects FormLift for Infusionsoft Web Forms: from n/a through 7.5.17.