~/products/ninjaforma/ninja_forms

pipeline liveDigest Docs

Ninjaforma Ninja Forms vulnerabilities

1 known vulnerability affecting ninjaforma/ninja_forms.

Total CVEs

1

CISA KEV

0

Public exploits

1

Exploited in wild

0

Severity breakdown

MEDIUM1

Vulnerabilities

SortPage 1 of 1

CVE-2018-19287P3MEDIUMCVSS 6.1PoCfixed in 3.3.182018-11-15

CVE-2018-19287 [MEDIUM] CWE-79 CVE-2018-19287: XSS in the Ninja Forms plugin before 3.3.18 for WordPress allows Remote Attackers to execute JavaScr XSS in the Ninja Forms plugin before 3.3.18 for WordPress allows Remote Attackers to execute JavaScript via the includes/Admin/Menus/Submissions.php (aka submissions page) begin_date, end_date, or form_id parameter.