Description
Unauthenticated Cross Site Scripting (XSS) in Ninja Forms File Uploads Extension <= 3.3.26 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Saturday Drive | Ninja Forms File Uploads Extension | ≤ 3.3.26 | — |
High · 7.1
CVE-2026-81773
EUVD-2026-70564GHSA-vhxc-28cc-c8wv
WordPress Ninja Forms File Uploads Extension plugin <= 3.3.26 - Cross Site Scripting (XSS) vulnerability
Published Sep 3, 2026 · Updated Sep 5, 2026 · Assigned by Patchstack