CVE-2026-100151

The Ninja Forms WordPress plugin (versions up to and including 3.15.5 ) is vulnerable to Reflected DOM-Based Cross-Site Scripting (XSS) . The root cause is insufficient input sanitization and output escaping related to the 'querystring:' URL parameter. An unauthenticated attacker can inject arbit...