Cpe:2.3:a:ninja_forms:ninja_forms:*:*:*:*:*:wordpress:*:*

CVE-2026-94504 describes a stored cross-site scripting vulnerability in Ninja Forms version 3.15.3, allowing attackers to execute arbitrary scripts in an administrator's browser session via the legacy submission editor.