CVE-2026-102385

Ninja Forms versions up to 3.15.3 are vulnerable to unauthenticated Cross Site Scripting (XSS), allowing attackers to inject malicious scripts that can execute in the context of users' browsers. This vulnerability poses a significant risk as it can lead to data theft, session hijacking, or defacement of web applications. Organizations using affected versions should prioritize patching to mitigate potential exploitation.