CVE Database /
CVE-2023-5530
CVE · Medium
CVE-2023-5530 — Ninja Forms – The Contact Form Builder That Grows With You [ninja-forms] < 3.6.34
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2023-5530
|
Ninja Forms – The Contact Form Builder That Grows With You [ninja-forms] < 3.6.34 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
Medium
4.8
|
< 3.6.34
|
3.6.34 |
2023-10-16 |
—
|
CVE-2023-5530
The Ninja Forms Contact Form plugin for WordPress contains a vulnerability in versions up to and including 3.6.33, allowing authenticated attackers with administrator-level permissions to inject malicious web scripts into pages that will be executed when accessed by users. This occurs due to inadequate input validation and output protection, and is limited to multi-site installations where unfiltered HTML is disabled.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings