High severity7.1NVD Advisory· Published Jul 27, 2023· Updated Jun 17, 2026
CVE-2023-37979
CVE-2023-37979
Description
Unauth. Reflected Cross-Site Scripting (XSS) vulnerability in Saturday Drive Ninja Forms Contact Form plugin <= 3.6.25 versions.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
4- Range: <=3.6.25
<=3.6.25+ 1 more
- (no CPE)range: <=3.6.25
- (no CPE)range: n/a
Patches
Vulnerability mechanics
References
3- patchstack.com/articles/multiple-high-severity-vulnerabilities-in-ninja-forms-pluginnvdThird Party Advisory
- patchstack.com/database/vulnerability/ninja-forms/wordpress-ninja-forms-plugin-3-6-25-reflected-cross-site-scripting-xss-vulnerabilitynvdThird Party Advisory
- packetstormsecurity.com/files/173983/WordPress-Ninja-Forms-3.6.25-Cross-Site-Scripting.htmlnvd
News mentions
0No linked articles in our index yet.