Sign in

4.8 Medium

CVE-2023-4109 The Ninja Forms WordPress Ninja Forms Contact Form WordPress plugin before 3.6.26 was affected by a HTML Injection…

Description

The Ninja Forms WordPress Ninja Forms Contact Form WordPress plugin before 3.6.26 was affected by a HTML Injection security vulnerability.

Affected products and versions

Product	Affected versions	Fixed in
Ninja Forms Contact Form 3.6	earliest → < 3.6.26	3.6.26

The 3 CVEs of Ninja Forms Contact Form →

CVE-2023-5530 The Ninja Forms Contact Form WordPress plugin before 3.6.34 does not sanitize and escape its label fields, which could… Not rated CVE-2023-1835 The Ninja Forms Contact Form WordPress plugin before 3.6.22 does not properly escape user input before outputting it… 6.1 Medium

Do you use Ninja Forms Contact Form?

Track this CVE Watch Ninja Forms Contact Form Check my SBOMs

www.cveye.io/en/cve/CVE-2023-4109

Timeline

Published August 30, 2023
Last modified April 23, 2025

References

wpscan.com wpscan.com

Track this CVE