The vulnerability CVE-2025-47644 is an open redirect issue in the formsintegrations plugin for Zoho CRM integration with Elementor forms, affecting versions up to 1.0.8. It allows attackers to redirect users to untrusted external URLs, potentially enabling phishing attacks by misleading users through crafted URLs. The CVSS 3.1 base score is 4.7, reflecting network attack vector, low attack complexity, no privileges required, user interaction required, scope changed, and limited confidentiality impact. No patch or remediation information is currently available.

The primary impact is the potential for phishing attacks due to the open redirect vulnerability. Attackers can exploit this to redirect users to malicious sites, potentially leading to credential theft or other social engineering attacks. There is no direct impact on data integrity or availability reported. No known exploits in the wild have been identified.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, users should exercise caution when clicking on links involving the formsintegrations plugin with Zoho CRM and Elementor forms, especially from untrusted sources. Monitoring for updates from the vendor or plugin maintainers is recommended.