CyberRota Analysis
AI-GeneratedThe Ninja Forms WordPress plugin version 3.15.3 is vulnerable due to improper escaping of submitted form field values, allowing unauthenticated users to inject malicious content through public forms. This could lead to cross-site scripting (XSS) attacks, impacting high-privileged users who access the submission edit screen in the admin area. WordPress site administrators using this plugin should prioritize applying the necessary updates to mitigate the risk of exploitation.
Original NVD Description
The Ninja Forms WordPress plugin 3.15.3 does not escape submitted form field values before outputting them on the submission edit screen in the admin area, which could allow unauthenticated users to submit values through a public form that then execute in the browser of any high-privileged user who reviews the submission.