Description
Unauthenticated Cross Site Scripting (XSS) in Ninja Forms <= 3.15.3 versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Kevin Stover | Ninja Forms | ≤ 3.15.3 | — |
High · 7.1
CVE-2026-95515
EUVD-2026-85490GHSA-fv67-37ph-mj67
WordPress Ninja Forms plugin <= 3.15.3 - Cross Site Scripting (XSS) vulnerability
Published Sep 23, 2026 · Updated Sep 23, 2026 · Assigned by Patchstack