Saturday Drive Ninja Forms Contact Form vulnerabilities

3 known vulnerabilities affecting saturday_drive/ninja_forms_contact_form.

Total CVEs

3

CISA KEV

0

Public exploits

1

Exploited in wild

0

Severity breakdown

HIGH1MEDIUM2

Vulnerabilities

Page 1 of 1

CVE-2023-36505HIGHCVSS 7.2≥ n/a, ≤ 3.6.242024-04-17

CVE-2023-36505 [HIGH] CWE-20 CVE-2023-36505: Improper Input Validation vulnerability in Saturday Drive Ninja Forms Contact Form.This issue affect Improper Input Validation vulnerability in Saturday Drive Ninja Forms Contact Form.This issue affects Ninja Forms Contact Form : from n/a through 3.6.24.

CVE-2023-37979MEDIUMCVSS 6.1PoC≥ n/a, ≤ 3.6.252023-07-27

CVE-2023-37979 [MEDIUM] CWE-79 CVE-2023-37979: Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Saturday Drive Ninja Forms Contact For Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Saturday Drive Ninja Forms Contact Form plugin <= 3.6.25 versions.

CVE-2021-36827MEDIUMCVSS 4.8≥ n/a, ≤ 3.6.92022-06-16

CVE-2021-36827 [MEDIUM] CWE-79 CVE-2021-36827: Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Saturday Drive's Ninja Forms Conta Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Saturday Drive's Ninja Forms Contact Form plugin <= 3.6.9 at WordPress via "label".