Cpe:2.3:a:ninjaforms:ninja_forms:*:*:*:*:*:wordpress:*:*

An unauthenticated stored XSS and arbitrary file write vulnerability in Ninja Forms versions 3.15.1 and earlier allows attackers to inject malicious scripts by exploiting input validation flaws in the File Uploads add-on.