CVE-2023-1835 (published 2023-05-15T12:15:46.279Z)
The Ninja Forms Contact Form WordPress plugin before 3.6.22 does not properly escape user input before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin
Affected products: Vendor: Unknown
Product: Ninja Forms Contact Form
Versions: 0