1316 matches found
PT-2020-13125
Name of the Vulnerable Software and Affected Versions ninja-forms plugin versions prior to 3.4.24.2 Description The issue allows for Cross-Site Request Forgery CSRF with resultant Cross-Site Scripting XSS. This means an attacker can trick a user into performing unintended actions on a web...
Ninja Forms < 3.4.24.2 - CSRF to Stored XSS
Ramuel Gall of Wordfence discovered a Cross-Site Request ForgeryCSRF plugin vulnerability within the Ninja Forms WordPress plugin. By exploiting the CSRF vulnerability, an attacker could inject arbitrary malicious JavaScript via the import contact feature. This vulnerability was reportedly fixed ...
CVE-2020-12462: Cross-Site Request Forgery (CSRF)
The ninja-forms plugin before 3.4.24.2 for WordPress allows CSRF with resultant XSS...
WordPress Ninja Forms Cross-Site Scripting Vulnerability
WordPress is a blogging platform developed by the WordPress Foundation using the PHP language. The platform supports personal blog sites on PHP and MySQL servers.Ninja Forms plugin is a form creation component used in it. A cross-site scripting vulnerability exists in WordPress Ninja Forms versio...
WordPress Ninja Forms Plugin < 3.4.23 XSS Vulnerability
The WordPress plugin Copyright C 2020 Greenbone Networks GmbH SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the...
CVE-2020-8594
The Ninja Forms plugin 3.4.22 for WordPress has Multiple Stored XSS vulnerabilities via ninjaformsrecaptchasitekey, ninjaformsrecaptchasecretkey, ninjaformsrecaptchalang, or ninjaformsdateformat...
CVE-2020-8594
The Ninja Forms plugin 3.4.22 for WordPress has Multiple Stored XSS vulnerabilities via ninjaformsrecaptchasitekey, ninjaformsrecaptchasecretkey, ninjaformsrecaptchalang, or ninjaformsdateformat...
CVE-2020-8594
The Ninja Forms plugin 3.4.22 for WordPress has Multiple Stored XSS vulnerabilities via ninjaformsrecaptchasitekey, ninjaformsrecaptchasecretkey, ninjaformsrecaptchalang, or ninjaformsdateformat...
Cross site scripting
The Ninja Forms plugin 3.4.22 for WordPress has Multiple Stored XSS vulnerabilities via ninjaformsrecaptchasitekey, ninjaformsrecaptchasecretkey, ninjaformsrecaptchalang, or ninjaformsdateformat...
CVE-2020-8594
The CVE-2020-8594 entry describes a stored XSS vulnerability in the WordPress Ninja Forms plugin, affecting version 3.4.22 (and earlier). The issue is triggered via ninja_forms[recaptcha_site_key], ninja_forms[recaptcha_secret_key], ninja_forms[recaptcha_lang], or ninja_forms[date_format], with r...
CVE-2020-8594
The Ninja Forms plugin 3.4.22 for WordPress has Multiple Stored XSS vulnerabilities via ninjaformsrecaptchasitekey, ninjaformsrecaptchasecretkey, ninjaformsrecaptchalang, or ninjaformsdateformat...
CVE-2020-8594: Improper Neutralization of Input During Web Page Generation
The Ninja Forms plugin 3.4.22 for WordPress has Multiple Stored XSS vulnerabilities via ninjaformsrecaptchasitekey, ninjaformsrecaptchasecretkey, ninjaformsrecaptchalang, or ninjaformsdateformat...
PT-2020-20227
Name of the Vulnerable Software and Affected Versions Ninja Forms plugin version 3.4.22 Description The issue concerns Multiple Stored XSS vulnerabilities. These vulnerabilities can be exploited via parameters such as ninja formsrecaptcha site key, ninja formsrecaptcha secret key, ninja...
Ninja Forms < 3.4.23 - CSRF to Stored Cross-Site Scripting (XSS)
Authenticated Stored XSS vulnerabilities in recaptchasitekey, recaptchasecretkey, recaptchalang and dateformat keys, which can be performed via CSRF attacks...
WordPress ninja-forms plugin input validation error vulnerability (CNVD-2019-30586)
WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. ninja-forms is a contact form creation plugin used in it. WordPress ninja-forms plugin input validation error vulnerability. The...
WordPress ninja-forms plugin input validation error vulnerability (CNVD-2019-30585)
WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. ninja-forms is a contact form creation plugin used in it. An input validation error vulnerability exists in the WordPress...
WordPress ninja-forms plugin input validation error vulnerability
WordPress is the WordPress Foundation's set of blogging platform developed using the PHP language. The platform supports personal blog sites on PHP and MySQL servers. ninja-forms is a contact form creation plugin used in it. The WordPress ninja-forms plugin suffers from an input validation error...
CVE-2018-20980
The ninja-forms plugin before 3.2.15 for WordPress has parameter tampering...