CVE-2021-24165 — Ninja Forms < 3.4.34 - Administrator Open Redirect
In the Ninja Forms Contact Form WordPress plugin before 3.4.34, the wp_ajax_nf_oauth_connect AJAX action was vulnerable to open redirect due to the use of a user supplied redire…
Published: 2021-04-05 · CVSS: Unscored
In the Ninja Forms Contact Form WordPress plugin before 3.4.34, the wp_ajax_nf_oauth_connect AJAX action was vulnerable to open redirect due to the use of a user supplied redirect parameter and no protection in place.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7