Medium · 4.8 CVE-2023-4109 EUVD-2023-53995GHSA-hhhv-r93p-348f

Ninja Forms < 3.6.26 - Admin+ Stored HTML Injection

Published Aug 30, 2023 · Updated Apr 23, 2025 · Assigned by WPScan

Description

The Ninja Forms WordPress Ninja Forms Contact Form WordPress plugin before 3.6.26 was affected by a HTML Injection security vulnerability.

Vendor	Product	Affected	Fixed
—	Ninja Forms Contact Form	< 3.6.26	3.6.26