← CVE Intelligence

CVE-2024-37934

WordPress Ninja Forms plugin <= 3.8.4 - Subscriber+ Arbitrary Shortcode Execution vulnerability PUBLISHED

Description (CNA)

Improper Control of Generation of Code ('Code Injection') vulnerability in Saturday Drive Ninja Forms allows Code Injection.This issue affects Ninja Forms: from n/a through 3.8.4.

Affected (CNA)

Vendor / productVersions
Saturday Drive / Ninja Formsaffected n/a through 3.8.4

CWE

CWE-94

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.