CVE-2021-36827

MEDIUM CVSS: 4.8 Published: 2022-06-16 Modified: 2026-06-17

Description

Auth. (admin+) Stored Cross-Site Scripting (XSS) vulnerability in Saturday Drive's Ninja Forms Contact Form plugin <= 3.6.9 at WordPress via "label".

Affected Platforms

Ninjaforms Ninja Forms

Weakness Type

CWE-79

References