NetSight
medium6.1

CVE-2017-18574

The ninja-forms plugin before 3.0.31 for WordPress has insufficient HTML escaping in the builder.

Impact

The ninja-forms plugin before 3.0.31 for WordPress has insufficient HTML escaping in the builder.

Affected products

VendorProductAffected versions
NinjaformsNinja Forms
before 3.0.31

Weakness classification

References