CVE-2024-50514

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Kevin Stover Ninja Forms ninja-forms allows Stored XSS.This issue affects Ninja Forms: from n/a through = 3.8.16...

CVE-2024-50514

creationtimestamp| type| source ---|---|--- 2024-11-19 16:52:23+00:00| seen| https://infosec.exchange/users/cve/statuses/113510655140914375...

WordPress Ninja Forms Plugin <= 3.8.16 is vulnerable to Cross Site Scripting (XSS)

Software Ninja Forms Type Plugin Vulnerable versions = 3.8.16 Fixed in 3.8.18 OWASP Top 10 A3: Injection Classification Cross Site Scripting XSS CVE CVE-2024-50514 Patch priority Low CVSS severity Low 5.9 Developer Claim ownership PSID 3c313a4c76ff Credits Hwang Se-yeon Required privilege...