CVE-2023-1835 — Ninja Forms < 3.6.22 - Reflected XSS
The Ninja Forms Contact Form WordPress plugin before 3.6.22 does not properly escape user input before outputting it back in an admin page, leading to a Reflected Cross-Site Scr…
Published: 2023-05-15 · CVSS: 6.1 · CVSS 3.1
The Ninja Forms Contact Form WordPress plugin before 3.6.22 does not properly escape user input before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7