Threats tagged 'ghsa-7cq6-x444-93vj'

1 threat

Threats tagged 'ghsa-7cq6-x444-93vj'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.2	EPSS 0.3%	CVE-2026-90438Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder · Cross-site Scripting High7.2EPSS 0.3%2026-10-02CVE Database V5CVE-2026-90438 Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder plugin for WordPress versions up to and including 3.15.4 is vulnerable to stored Cross-Site Scripting (XSS) via the Paragraph Text field when the Rich Text Editor (RTE) option is enabled. This vulnerability allows unauthenticated attackers to inject malicious scripts that execute when users view the affected pages. EPSS 0.3%Vulnerability kstover #cwe-79 #ghsa-7cq6-x444-93vj	CVE Database V5	2026-10-02

Showing 1–1 of 1 result