CVE-2026-92438

The Ninja Forms WordPress plugin version 3.15.3 is vulnerable to an unauthenticated stored XSS via the Paragraph Text Field . Submitted form field values are not escaped before being output on the submission edit screen in the admin area, allowing unauthenticated users to inject script through a ...