Cross site scripting

2020-02-1420:15:00

PRIOn knowledge base

www.prio-n.com

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

26.6%

JSON

The Ninja Forms plugin 3.4.22 for WordPress has Multiple Stored XSS vulnerabilities via ninja_forms[recaptcha_site_key], ninja_forms[recaptcha_secret_key], ninja_forms[recaptcha_lang], or ninja_forms[date_format].

CPENameOperatorVersion
ninja_formseq3.4.22

CPE	Name	Operator	Version
	ninja_forms	eq	3.4.22

References

spider-security.co.uk/blog-cve-cve-2020-8594

wordpress.org/plugins/ninja-forms/

wpvulndb.com/vulnerabilities/10070