CVE-2017-18574: Input Validation
Published Aug 22, 2019
·Updated
The ninja-forms plugin before 3.0.31 for WordPress has insufficient HTML escaping in the builder.
Affected Software
1 affected component
NinjaForms Ninja Forms Wordpress<3.0.31
Event History
Aug 22, 2019
CVE Published
via MITRE·12:42 PM
Data Sourced
via MITRE·12:42 PM
Description
Frequently Asked Questions
1
What is CVE-2017-18574?
CVE-2017-18574 is a vulnerability in the ninja-forms plugin before 3.0.31 for WordPress that allows for insufficient HTML escaping in the builder.
2
What is the severity of CVE-2017-18574?
The severity of CVE-2017-18574 is medium with a CVSS score of 6.1.
3
How does CVE-2017-18574 affect WordPress?
CVE-2017-18574 affects WordPress through the ninja-forms plugin version prior to 3.0.31.
4
How can I fix CVE-2017-18574?
To fix CVE-2017-18574, update the ninja-forms plugin to version 3.0.31 or later.
5
Where can I find more information on CVE-2017-18574?
You can find more information on CVE-2017-18574 on the official WordPress plugin page for ninja-forms: [https://wordpress.org/plugins/ninja-forms/#developers](https://wordpress.org/plugins/ninja-forms/#developers)