Description
Unauthenticated Cross Site Scripting (XSS) in Ninja Forms <= 3.15.3 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Kevin Stover | Ninja Forms | ≤ 3.15.3 | — |
High · 7.1
CVE-2026-102385
EUVD-2026-89941GHSA-45xc-76g4-jjx3
WordPress Ninja Forms plugin <= 3.15.3 - Cross Site Scripting (XSS) vulnerability
Published Sep 30, 2026 · Updated Sep 30, 2026 · Assigned by Patchstack