CVE-2021-25066

🗓️ 04 Jul 2022 13:05:27Reported by WPScanType

cve🔗 web.nvd.nist.gov📰️ 8 Media mentions👁 54 Views

The Ninja Forms Contact Form WordPress plugin before 3.6.10 is vulnerable to Cross-Site Scriptin

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2021-25066	4 Jul 202216:12	–	circl
CNNVD	WordPress plugin Ninja Forms Contact Form 跨站脚本漏洞	4 Jul 202200:00	–	cnnvd
CNVD	WordPress Ninja Forms Contact Form plugin cross-site scripting vulnerability (CNVD-2022-58230)	6 Jul 202200:00	–	cnvd
Cvelist	CVE-2021-25066 Ninja Forms < 3.6.10 - Admin+ Stored Cross-Site Scripting via Import	4 Jul 202213:05	–	cvelist
EUVD	EUVD-2021-11978	7 Oct 202500:30	–	euvd
NVD	CVE-2021-25066	4 Jul 202213:15	–	nvd
OpenVAS	WordPress Ninja Forms Contact Form Plugin < 3.6.10 Multiple Vulnerabilities	5 Jul 202200:00	–	openvas
Patchstack	WordPress Ninja Forms plugin <= 3.6.9 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability	10 Jun 202200:00	–	patchstack
Prion	Cross site scripting	4 Jul 202213:15	–	prion
RedhatCVE	CVE-2021-25066	22 May 202519:24	–	redhatcve

NVD

Vulners

Node

ninjaforms ninja_formsRange<3.6.10wordpress

[
  {
    "product": "Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress",
    "vendor": "Unknown",
    "versions": [
      {
        "lessThan": "3.6.10",
        "status": "affected",
        "version": "3.6.10",
        "versionType": "custom"
      }
    ]
  }
]