2188 matches found
Ninja Forms < 3.4.23 - CSRF to Stored Cross-Site Scripting (XSS)
Authenticated Stored XSS vulnerabilities in recaptchasitekey, recaptchasecretkey, recaptchalang and dateformat keys, which can be performed via CSRF attacks...
WordPress Shortcode Ninja Cross-Site Scripting Vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Shortcode Ninja is a form builder plugin used in it. WordPress Shortcode Ninja 1.4 and earlier versions of the...
CVE-2014-4550
Cross-site scripting XSS vulnerability in preview-shortcode-external.php in the Shortcode Ninja plugin 1.4 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the shortcode parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in preview-shortcode-external.php in the Shortcode Ninja plugin 1.4 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the shortcode parameter...
CVE-2014-4550
Cross-site scripting XSS vulnerability in preview-shortcode-external.php in the Shortcode Ninja plugin 1.4 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the shortcode parameter...
CVE-2014-4550
CVE-2014-4550 is a cross-site scripting vulnerability in the WordPress plugin Shortcode Ninja up to version 1.4 (and earlier) in the file preview-shortcode-external.php . The root cause is insufficient validation/escaping of the shortcode parameter, allowing remote attackers to inject arbitrary s...
CVE-2014-4550: Improper Neutralization of Input During Web Page Generation
Cross-site scripting XSS vulnerability in preview-shortcode-external.php in the Shortcode Ninja plugin 1.4 and earlier for WordPress allows remote attackers to inject arbitrary web script or HTML via the shortcode parameter...
PT-2019-7116
Name of the Vulnerable Software and Affected Versions Shortcode Ninja plugin versions 1.4 and earlier Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the shortcode parameter. This can be exploited by injecting malicious code into the...
WordPress ninja-forms plugin input validation error vulnerability (CNVD-2019-30586)
WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. ninja-forms is a contact form creation plugin used in it. WordPress ninja-forms plugin input validation error vulnerability. The...
WordPress ninja-forms plugin input validation error vulnerability
WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. ninja-forms is a contact form creation plugin used in it. The WordPress ninja-forms plugin suffers from an input validation error...
WordPress ninja-forms plugin input validation error vulnerability (CNVD-2019-30585)
WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. ninja-forms is a contact form creation plugin used in it. An input validation error vulnerability exists in the WordPress...
CVE-2018-20980
The ninja-forms plugin before 3.2.15 for WordPress has parameter tampering...
CVE-2018-20980
The ninja-forms plugin before 3.2.15 for WordPress has parameter tampering...
CVE-2017-18574
The ninja-forms plugin before 3.0.31 for WordPress has insufficient HTML escaping in the builder...
CVE-2018-20981
The ninja-forms plugin before 3.3.9 for WordPress has insufficient restrictions on submission-data retrieval during Export Personal Data requests...
CVE-2017-18574
The ninja-forms plugin before 3.0.31 for WordPress has insufficient HTML escaping in the builder...
Code injection
The ninja-forms plugin before 3.2.15 for WordPress has parameter tampering...
Design/Logic Flaw
The ninja-forms plugin before 3.3.9 for WordPress has insufficient restrictions on submission-data retrieval during Export Personal Data requests...