CVE-2025-53279: WordPress Popup addon for Ninja Forms plugin <= 3.4 - Cross Site Scripting (XSS) Vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aman Popup addon for Ninja Forms allows DOM-Based XSS. This issue affects Popup addon for Ninja Forms: from n/a through 3.4.
Other sources
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Aman Popup addon for Ninja Forms popup-addon-for-ninja-forms allows DOM-Based XSS.This issue affects Popup addon for Ninja Forms: from n/a through <= 3.4.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-53279?
CVE-2025-53279 has been classified as a high severity vulnerability due to its potential to allow DOM-Based XSS.
How does CVE-2025-53279 affect users?
CVE-2025-53279 can allow attackers to execute arbitrary JavaScript in the context of the user's browser, potentially compromising user data.
How do I fix CVE-2025-53279?
To fix CVE-2025-53279, update the Popup addon for Ninja Forms to a version later than 3.4, where the vulnerability has been addressed.
What versions are affected by CVE-2025-53279?
CVE-2025-53279 affects the Popup addon for Ninja Forms versions from n/a up to and including 3.4.
What should I do if I cannot update to fix CVE-2025-53279?
If you cannot update, it is recommended to disable the Popup addon for Ninja Forms to mitigate the risk of exploitation from CVE-2025-53279.