Lucene search

K
patchstackNuno Correia (Blaze Security)PATCHSTACK:0D6BA2576D94128E6F23B29B15159E29
HistoryMar 08, 2022 - 12:00 a.m.

WordPress Ninja Forms File Uploads Extension premium plugin <= 3.3.12 - Reflected Cross-Site Scripting (XSS) vulnerability

2022-03-0800:00:00
Nuno Correia (Blaze Security)
patchstack.com
18
wordpress
ninja forms
file uploads
cross-site scripting (xss)
nuno correia
blaze security
update

EPSS

0.001

Percentile

35.5%

Reflected Cross-Site Scripting (XSS) vulnerability discovered by Nuno Correia (Blaze Security) in WordPress Ninja Forms File Uploads Extension premium plugin (versions <= 3.3.12).

Solution

           Update the WordPress Ninja Forms File Uploads Extension premium plugin to the latest available version (at least 3.3.13).

EPSS

0.001

Percentile

35.5%

Related for PATCHSTACK:0D6BA2576D94128E6F23B29B15159E29