medium5.4
CVE-2020-8594
The Ninja Forms plugin 3.4.22 for WordPress has Multiple Stored XSS vulnerabilities via ninja_forms[recaptcha_site_key], ninja_forms[recaptcha_secret_key], nin…
Impact
The Ninja Forms plugin 3.4.22 for WordPress has Multiple Stored XSS vulnerabilities via ninja_forms[recaptcha_site_key], ninja_forms[recaptcha_secret_key], ninja_forms[recaptcha_lang], or ninja_forms[date_format].
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ninjaforms | Ninja Forms | Version 3.4.22 |
Weakness classification
References
- NVD record
- CVE.org record
- https://spider-security.co.uk/blog-cve-cve-2020-8594
- https://wordpress.org/plugins/ninja-forms/#developers
- https://wpvulndb.com/vulnerabilities/10070
- https://spider-security.co.uk/blog-cve-cve-2020-8594
- https://wordpress.org/plugins/ninja-forms/#developers
- https://wpvulndb.com/vulnerabilities/10070