Product
An incomplete server-side validation vulnerability in Ninja Forms for WordPress before 3.15.4 allows unauthenticated attackers to perform CSV injection attacks.