Ninja Forms File Uploads vulnerabilities | LiveThreat CVE Feed

Product

Ninja Forms File Uploads

by Ninjaforms · last CVE Sep 7, 2024

CVEs

On KEV

9.8

Max CVSS

New 30D

Severity mix

Critical 1High 1Medium 2Low 0

Severity

Exploitation

Watch

Add Ninja Forms File Uploads to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2024-1596	6.1	0%	Sep 7	Ninja Forms File Uploads <= 3.3.16 - Unauthenticated Stored Cross-Site Scripting via File Upload Affected: before 3.3.18
CVE-2022-0889	6.1	1%	Mar 23	The Ninja Forms - File Uploads Extension WordPress plugin is vulnerable to reflected cross-site scripting due to missing sanitization of the files filename parameter found in the… Affected: through 3.3.12