CVE-2024-26019

2024-04-1103:15:09

[email protected]

web.nvd.nist.gov

ninja forms

cross-site scripting

web browser

submit processing

6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.5%

JSON

Ninja Forms prior to 3.8.1 contains a cross-site scripting vulnerability in submit processing. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is accessing to the website using the product.

References

jvn.jp/en/jp/JVN50361500/

ninjaforms.com/

wordpress.org/plugins/ninja-forms/