WordPress Ninja Forms 3.3.17 Cross Site Scripting

WordPress Ninja Forms version 3.3.17 suffers from a cross site scripting vulnerability.

MD5 | a90814e7187521ea474ee2c55e40aca8

# Exploit Title: Wordpress Plugin Ninja Forms 3.3.17 - Cross-Site Scripting
# Date: 2018-11-15
# Exploit Author: MTK
# Vendor Homepage: https://ninjaforms.com
# Softwae Link: https://wordpress.org/plugins/ninja-forms/
# Version: Up to V3.3.17
# Tested on: Debian 9 - Apache2 - Wordpress 4.9.8 - Firefox
# CVE : CVE-2018-19287

# Plugin description:
# Ninja Forms is the ultimate FREE form creation tool for WordPress. Build forms within minutes
# using a simple yet powerful drag-and-drop form creator. For beginners, quickly and easily
# design complex forms with absolutely no code. For developers, utilize built-in hooks,
# filters, and even custom field templates to do whatever you need at any step in
# the form building or submission using Ninja Forms as a framework.





Related Posts