cleantalk
Vulnerabilities and Security Researches

Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress, CVE-2021-36827

CVE, Research URL

CVE-2021-36827

Published on
Jun 16, 2022
Research Description
Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Saturday Drive's Ninja Forms Contact Form plugin <= 3.6.9 at WordPress via "label".
Affected versions
Min -, max 2.9.19.
Status
vulnerable