Ninja Forms < 3.3.9 - Insufficient Restrictions during Export Personal Data requests

The Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress WordPress plugin was affected by an Insufficient Restrictions during Export Personal Data requests security vulnerability...

DHCP Client Command Injection (DynoRoot)

This module exploits the DynoRoot vulnerability, a flaw in how the NetworkManager integration script included in the DHCP client in Red Hat Enterprise Linux 6 and 7, Fedora 28, and earlier processes DHCP options. A malicious DHCP server, or an attacker on the local network able to spoof DHCP...

WordPress Ninja Forms SQL Injection

SQL Injection vulnerability in WordPress Ninja Forms plugin parse-media-shortcode parameter Vulnerability Type: SQL Injection For the exploit source code contact DSquare Security sales team...

ninja-polo.com XSS vulnerability

Open Bug Bounty ID: OBB-581861 Description| Value ---|--- Affected Website:| ninja-polo.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

WordPress Plugin Ninja Forms Cross-Site Scripting Vulnerability

WordPress is the WordPress Software Foundation's set of blogging platform developed using the PHP language , the platform supports in PHP and MySQL servers to set up a personal blog site . Ninja Forms is one of the form plug-ins . A cross-site scripting vulnerability exists in the WordPress plugi...

Ninja Forms < 3.2.15 - Parameter Tampering

The Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress WordPress plugin was affected by a Parameter Tampering security vulnerability...

WordPress Ninja Forms plugin <=3.2.13 - Cross-Site Scripting (XSS) vulnerability

Cross-Site Scripting XSS vulnerability found by Kasper Karlsson in WordPress Ninja Forms plugin versions = 3.2.13. Solution Update the WordPress Ninja Forms plugin to the latest available version at least 3.2.14...

WordPress Ninja Forms Plugin < 3.3.19.1 Open Redirect Vulnerability

The WordPress plugin Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...

WordPress Ninja Forms Plugin < 3.2.14 XSS Vulnerability

The WordPress plugin Copyright C 2018 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can redistribute it and/or modify it...

CVE-2018-7280

The Ninja Forms plugin before 3.2.14 for WordPress has XSS...

CVE-2018-7280

The Ninja Forms plugin before 3.2.14 for WordPress has XSS...

Cross site scripting

The Ninja Forms plugin before 3.2.14 for WordPress has XSS...

CVE-2018-7280

The Ninja Forms plugin before 3.2.14 for WordPress has XSS...

CVE-2018-7280

CVE-2018-7280 affects the WordPress Ninja Forms plugin prior to 3.2.14 (i.e., versions

PT-2018-17996

Name of the Vulnerable Software and Affected Versions Ninja Forms plugin versions prior to 3.2.14 Description The issue is related to a cross-site scripting XSS problem. Recommendations For versions prior to 3.2.14, update to version 3.2.14 or later to resolve the issue...

CVE-2018-7280: Improper Neutralization of Input During Web Page Generation

The Ninja Forms plugin before 3.2.14 for WordPress has XSS...

Ninja Forms <= 3.2.13 - Cross-Site Scripting (XSS)

The Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress WordPress plugin was affected by a Cross-Site Scripting XSS security vulnerability...

February 15, 2018 – Morning Cyber Coffee Headlines – “Ninja Turtles” Edition

Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! February 15, 2018 - Headlines Carbon Black in the News: JASK Announces Technolo...

Cross site scripting

Invoice Ninja version 3.8.1 is vulnerable to stored cross-site scripting vulnerability, within the invoice creation page, which can result in disruption of service and execution of javascript code...

CVE-2017-1000466

Invoice Ninja version 3.8.1 is vulnerable to stored cross-site scripting vulnerability, within the invoice creation page, which can result in disruption of service and execution of javascript code...