CVE-2017-18574
The Ninja Forms Contact Form plugin for WordPress contained a cross-site scripting (XSS) vulnerability, allowing malicious code to be injected and executed on a website.
Based on public CVE data (MITRE/NVD).
CVE · Medium
CVE-2017-18574 — Ninja Forms – The Contact Form Builder That Grows With You [ninja-forms] < 3.0.31
| CVE | Vulnerability | Type | Severity | Affected | Fixed in | Published | Status |
|---|---|---|---|---|---|---|---|
| CVE-2017-18574 | Ninja Forms – The Contact Form Builder That Grows With You [ninja-forms] < 3.0.31 | Improper Input Validation | Medium 6.1 | < 3.0.31 | 3.0.31 | 2017-03-07 | — |
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.