CVE-2023-4109

MediumCVSS 4.8

Published: 30/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.38%

30th percentile - higher than 30% of all known CVEs

The Ninja Forms plugin for WordPress before version 3.6.26 was affected by an HTML Injection security vulnerability.

An attacker could exploit this vulnerability to inject malicious HTML code, potentially leading to data theft or takeover of the site.

It is recommended to update the Ninja Forms plugin to the latest version to mitigate this security vulnerability.

Original NVD description (English source)

The Ninja Forms WordPress Ninja Forms Contact Form WordPress plugin before 3.6.26 was affected by a HTML Injection security vulnerability.