CVE-2024-29220: XSS
Published Apr 11, 2024
·Updated
Ninja Forms prior to 3.8.1 contains a cross-site scripting vulnerability in custom fields for labels. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is accessing to the website using the product.
Affected Software
2 affected components
Ninja Forms Ninja Forms<3.8.1
NinjaForms Ninja Forms Wordpress<3.8.1
Event History
Apr 11, 2024
CVE Published
via MITRE·02:29 AM
Data Sourced
via MITRE·02:29 AM
DescriptionWeakness
Data Sourced
via NVD·03:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2024-29220?
CVE-2024-29220 is classified as a cross-site scripting (XSS) vulnerability with a medium severity level.
2
How do I fix CVE-2024-29220?
To fix CVE-2024-29220, update Ninja Forms to version 3.8.1 or later.
3
What kind of attack is enabled by CVE-2024-29220?
CVE-2024-29220 enables an attacker to execute arbitrary scripts in the browser of users accessing the affected website.
4
Which versions of Ninja Forms are affected by CVE-2024-29220?
Ninja Forms versions prior to 3.8.1 are vulnerable to CVE-2024-29220.
5
What components of Ninja Forms are impacted by CVE-2024-29220?
CVE-2024-29220 specifically affects custom fields for labels within the Ninja Forms plugin.