Ninja Forms Contact Form (Unknown) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2023-11-06. Vendor: Unknown.

CVEs of Ninja Forms Contact Form

• CVE-2023-5530 - CVSS 4.8 (medium), 2023-11-06: The Ninja Forms Contact Form WordPress plugin before 3.6.34 does not sanitize and escape its label fields, which could allow high privilege users such as…
• CVE-2023-4109 - CVSS 4.8 (medium), 2023-08-30: The Ninja Forms WordPress Ninja Forms Contact Form WordPress plugin before 3.6.26 was affected by a HTML Injection security vulnerability.
• CVE-2023-1835 - CVSS 6.1 (medium), 2023-05-15: The Ninja Forms Contact Form WordPress plugin before 3.6.22 does not properly escape user input before outputting it back in an admin page, leading to a…