CVE-2014-8815

A WordPress plugin called Ninja Forms Contact Form is susceptible to a type of attack called Reflected Cross-Site Scripting. This occurs when a malicious actor injects malicious code into the plugin's update message parameter, which is not properly sanitized or escaped. As a result, an attacker can potentially execute arbitrary web scripts on a user's page, even if the user doesn't have an account, by tricking them into clicking on a link.

Based on public CVE data (MITRE/NVD).