Unscored CVE-2020-8594 EUVD-2020-29442GHSA-r659-m5mg-23ch

The Ninja Forms plugin 3.4.22 for WordPress has Multiple Stored XSS vulnerabilities via ninja_forms[recaptcha_site_key], ninja_forms[recapt…

Published Feb 14, 2020 · Updated Aug 4, 2024 · Assigned by mitre

Description

The Ninja Forms plugin 3.4.22 for WordPress has Multiple Stored XSS vulnerabilities via ninja_forms[recaptcha_site_key], ninja_forms[recaptcha_secret_key], ninja_forms[recaptcha_lang], or ninja_forms[date_format].

References

https://wordpress.org/plugins/ninja-forms/#developers
https://spider-security.co.uk/blog-cve-cve-2020-8594
https://wpvulndb.com/vulnerabilities/10070