CVE-2023-37979 PoC — WordPress Ninja Forms Plugin <= 3.6.25 is vulnerable to Cross Site Scripting (XSS)

Source

https://github.com/d0rb/CVE-2023-37979

Associated Vulnerability

Title: WordPress Ninja Forms Plugin <= 3.6.25 is vulnerable to Cross Site Scripting (XSS) (CVE-2023-37979)
Description:Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Saturday Drive Ninja Forms Contact Form plugin <= 3.6.25 versions.

Description

CVE-2023-37979 PoC and Checker

Readme

# CVE-2023-37979
##
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Saturday Drive Ninja Forms Contact Form plugin <= 3.6.25 versions.
##
 PoC and Checker , for educational purposes only
##
 `'python3 exploit.py https://target.com'`

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →