CVE Database /
CVE-2024-2108
CVE · Medium
CVE-2024-2108 — Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder [ninja-forms] < 3.8.1
| CVE |
Vulnerability |
Type |
Severity |
Affected |
Fixed in |
Published |
Status |
|
CVE-2024-2108
|
Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder [ninja-forms] < 3.8.1 |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') |
Medium
5.4
|
< 3.8.1
|
3.8.1 |
2024-03-28 |
—
|
CVE-2024-2108
A vulnerability in the Ninja Forms plugin for WordPress allows an attacker to inject malicious scripts into a website, which can then be executed by visitors, potentially leading to unauthorized actions such as redirects or displaying unwanted advertisements. This issue can be exploited by an attacker to inject and run malicious code on a website, compromising its security. The vulnerability has been addressed in version 3.8.1 of the plugin.
Based on public CVE data (MITRE/NVD).
Scan your WordPress site free
No signup, no credit card — enter your URL and get a security report in seconds.
See the full security page for this plugin
Browse the CVE database
Browse all security findings