CVE-2023-37979: WordPress Ninja Forms Plugin <= 3.6.25 is vulnerable to Cross Site Scripting (XSS)
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Saturday Drive Ninja Forms Contact Form plugin <= 3.6.25 versions.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2023-37979?
The severity of CVE-2023-37979 is high with a CVSS score of 6.1.
How does the "Unauth. Reflected Cross-Site Scripting (XSS)" vulnerability in Saturday Drive Ninja Forms Contact Form plugin affect my website?
The vulnerability allows attackers to inject malicious code into webpages viewed by users, potentially leading to unauthorized actions or data theft.
What is the affected software by CVE-2023-37979?
The affected software is the Saturday Drive Ninja Forms Contact Form plugin version 3.6.25 and below for WordPress.
How can I fix the Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Saturday Drive Ninja Forms Contact Form plugin?
Update your Saturday Drive Ninja Forms Contact Form plugin to version 3.6.26 or higher.
Where can I find more information about CVE-2023-37979?
You can find more information about CVE-2023-37979 at the following references: [1](https://patchstack.com/articles/multiple-high-severity-vulnerabilities-in-ninja-forms-plugin?_s_id=cve), [2](https://patchstack.com/database/vulnerability/ninja-forms/wordpress-ninja-forms-plugin-3-6-25-reflected-cross-site-scripting-xss-vulnerability?_s_id=cve), [3](http://packetstormsecurity.com/files/173983/WordPress-Ninja-Forms-3.6.25-Cross-Site-Scripting.html)