Threats tagged 'ghsa-qf5g-wf7g-22vp'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	6.1	CVE-2026-100151The Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder plugin for WordPress is Medium6.12026-10-31GCVE DatabaseCVE-2026-100151 The Ninja Forms plugin for WordPress up to version 3.15.5 is vulnerable to reflected DOM-based cross-site scripting (XSS) via a crafted 'querystring:<key>' URL parameter. This vulnerability arises from insufficient input sanitization and output escaping, allowing unauthenticated attackers to inject arbitrary scripts that execute in the context of a victim's browser if they are tricked into clicking a malicious link. Report on CVE-2026-100151 Vulnerability CWE-79 #ghsa-qf5g-wf7g-22vp	GCVE Database	2026-10-31

Page 1 of 1