Tag

Cve-2026-90438

1 brief RSS

Stored XSS in Ninja Forms WordPress Plugin

The Ninja Forms WordPress plugin versions 3.15.4 and earlier contain a stored Cross-Site Scripting vulnerability allowing unauthenticated attackers to inject malicious scripts via Paragraph Text fields with Rich Text Editor enabled.

Ninja Forms – The Contact Form Builder That Grows With You web-vulnerability wordpress xss cve-2026-90438

2t 1c 1w ago