CVE-2021-36827 — WordPress Ninja Forms Contact Form plugin <= 3.6.9 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability

CVE-2021-36827

WordPress Ninja Forms Contact Form plugin <= 3.6.9 - Authenticated Stored Cross-Site Scripting (XSS) vulnerability PUBLISHED

Description (CNA)

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Saturday Drive's Ninja Forms Contact Form plugin <= 3.6.9 at WordPress via "label".

Vendor / product	Versions
Saturday Drive / Ninja Forms Contact Form (WordPress plugin)	affected n/a through 3.6.9

CWE-79

CVE

No English description supplied.