CVE-2024-7354

The Ninja Forms plugin for WordPress is susceptible to a type of attack where malicious code can be injected into a website's pages through a URL, allowing an attacker to potentially execute arbitrary scripts on a user's browser without needing to authenticate. This occurs when the plugin fails to properly sanitize user input, allowing an attacker to manipulate the URL and inject malicious code that can be executed when a user clicks on a link.

Based on public CVE data (MITRE/NVD).