This vulnerability (CWE-601) in Appcheap.io App Builder allows URL redirection to untrusted sites, which can be exploited by attackers to redirect users to malicious domains. The affected product versions include all up to 3.8.7. The CVSS 3.1 vector indicates the attack can be performed remotely without privileges, requires user interaction, and impacts confidentiality with a scope change. No official fix or patch is currently documented, and the product is not a cloud service, so remediation depends on vendor updates.

The vulnerability can be used to redirect users to potentially malicious external websites, which may lead to phishing or social engineering attacks. The confidentiality impact is low, with no integrity or availability impacts reported. There are no known active exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should exercise caution when clicking on URLs generated by the Appcheap.io App Builder and consider implementing additional validation or filtering of redirect URLs if possible.