Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder vulnerabilities
3 known vulnerabilities in Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder from Kstover. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 7.2 High severity
Ninja Forms – Contact Form Builder with…: Improper Neutralization of Input During Web Page Generation
The Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'formData.extra' parameter in all versions up to, and including, 3.15.5 due to insufficient
- 7.2 High severity
Ninja Forms – Contact Form Builder with…: Improper Neutralization of Input During Web Page Generation
The Ninja Forms – The Contact Form Builder That Grows With You plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Paragraph Text (RTE) Field Submission in all versions up to, and including, 3.15.4 due to insufficient input sanitization and o
- 7.2 High severity
Ninja Forms – Contact Form Builder with…: Improper Neutralization of Input During Web Page Generation
Ninja Forms 3.15.3 stores an anonymous non-RTE textarea value and renders it without safe HTML encoding in the legacy submission editor. An attacker can break out of the textarea with stored script. When an Administrator opens the attacker-known direct submiss