All 2 CVE vulnerabilities found in Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder, with AI-generated Chinese analysis, references, and POCs.
Vendor: kstover
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2026-90438 | Ninja Forms <= 3.15.4 - Unauthenticated Stored Cross-Site Scripting via Paragraph Text (RTE) Field Submission CWE-79 | 7.2 | High | 2026-10-02 |
| CVE-2026-94504 | Ninja Forms – The Contact Form Builder That Grows With You <= 3.15.3 - Stored Cross-Site Scripting CWE-79 | 7.2 | High | 2026-09-22 |
All 2 known CVE vulnerabilities affecting Ninja Forms – Contact Form Builder with Calculators, Quizzes, Signatures & AI Form Builder with full Chinese analysis, references, and POCs where available.