Skip to content
Sign in
5.9 Medium

CVE-2025-64264 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aman Popup addon…

Description

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aman Popup addon for Ninja Forms popup-addon-for-ninja-forms allows Stored XSS.This issue affects Popup addon for Ninja Forms: from n/a through <= 3.5.1.

Affected products and versions

Product Affected versions Fixed in
Popup addon for Ninja Forms 3.5 earliest → 3.5.1 No fix stated

Other CVEs of Popup addon for Ninja Forms

The 2 CVEs of Popup addon for Ninja Forms →
CVE-2025-53279 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aman Popup addon… 6.5 Medium
Track this CVE