8 matches found
CVE-2026-94504
Ninja Forms 3.15.3 stores an anonymous non-RTE textarea value and renders it without safe HTML encoding in the legacy submission editor. An attacker can break out of the textarea with stored script. When an Administrator opens the attacker-known direct submission URL, the script runs in the...
CVE-2026-94504 Ninja Forms – The Contact Form Builder That Grows With You <= 3.15.3 - Stored Cross-Site Scripting
Ninja Forms 3.15.3 stores an anonymous non-RTE textarea value and renders it without safe HTML encoding in the legacy submission editor. An attacker can break out of the textarea with stored script. When an Administrator opens the attacker-known direct submission URL, the script runs in the...
EUVD-2026-84281
Ninja Forms 3.15.3 stores an anonymous non-RTE textarea value and renders it without safe HTML encoding in the legacy submission editor. An attacker can break out of the textarea with stored script. When an Administrator opens the attacker-known direct submission URL, the script runs in the...
CVE-2026-94504
Ninja Forms (WordPress plugin) 3.15.3 and earlier is vulnerable to a stored cross-site scripting (XSS) flaw in the legacy submission editor. The root cause is that an anonymous non-RTE textarea value is stored and rendered without safe HTML encoding, allowing an attacker to break out of the texta...
CVE-2026-94504: Improper Neutralization of Input During Web Page Generation
Ninja Forms 3.15.3 stores an anonymous non-RTE textarea value and renders it without safe HTML encoding in the legacy submission editor. An attacker can break out of the textarea with stored script. When an Administrator opens the attacker-known direct submission URL, the script runs in the...
PT-2026-96653
Name of the Vulnerable Software and Affected Versions Ninja Forms versions prior to 3.15.4 Description Stored Cross-Site Scripting occurs when the legacy submission editor renders an anonymous non-RTE textarea value without safe HTML encoding. This allows an attacker to inject a stored script tha...
CVE-2024-35786
In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: fix stale locked mutex in nouveaugemioctlpushbuf If VMBIND is enabled on the client the legacy submission ioctl can't be used, however if a client tries to do so regardless it will return an error. In this case the...
DEBIAN-CVE-2024-35786
In the Linux kernel, the following vulnerability has been resolved: drm/nouveau: fix stale locked mutex in nouveaugemioctlpushbuf If VMBIND is enabled on the client the legacy submission ioctl can't be used, however if a client tries to do so regardless it will return an error. In this case the...