Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

Ninja Forms Unauthenticated Stored XSS via Shortcode Injection (with POC)

github.com 2026-10-24 查看中文 →
Security Advisory High Ninja Forms
Affected:
  • Ninja Forms <= 5.0.0
  • Ninja Forms <= 5.4.1
Fixed in:
  • 5.3.2
  • 5.4.2
Referenced CVEs: CVE-2026-115457 · 7.1
文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive
This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.
More from this source
SQL Injection in testimonials/testimonialpage.php: Analysis, POC, and Fix 2026-10-26 Apache Log4j2 CVE-2021-40444 RCE Analysis with JNDI Injection POC 2026-10-26 Django PostgreSQL ArrayField/HStoreField DoS Vulnerability Analysis and POC 2026-10-26 sourcecodefire Performance Indicator System SQL Injection Vulnerability Analysis and POC 2026-10-26 SourceCreditor Performance Indicator System PHPMyCode Component Pre-Auth SQL Injection Vulnerability 2026-10-26
Offline Archive

Offline screenshot & PDF are Pro-exclusive

Upgrade to Pro