CVE Database /
CVE-2024-11052
CVE · High
CVE-2024-11052 — Ninja Forms – The Contact Form Builder That Grows With You [ninja-forms] < 3.8.20
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2024-11052
|
Ninja Forms – The Contact Form Builder That Grows With You [ninja-forms] < 3.8.20 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
High
7.2
|
< 3.8.20
|
3.8.20 |
2024-12-11 |
—
|
CVE-2024-11052
The Ninja Forms plugin for WordPress contains a vulnerability that allows attackers to inject malicious code into website pages. This is due to inadequate protection against potentially harmful input and insufficient measures to prevent the execution of injected scripts. As a result, unauthenticated attackers can embed arbitrary web scripts that will run whenever a user accesses the affected page.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings