The Ninja Forms WordPress plugin is vulnerable to stored cross-site scripting (XSS) due to improper input sanitization and a flawed nonce implementation in the nf_ajax_submit endpoint, allowing unauthenticated attackers to execute arbitrary web scripts.
Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder
xss
web-application
wordpress
plugin-vulnerability
1r
2t
1c