https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-03T12:02:25.468716+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2021-25066 CVE-2021-25066 — Ninja Forms < 3.6.10 - Admin+ Stored Cross-Site Scripting via Import 2026-10-03T12:02:25.633567+00:00

Affected: Unknown Ninja Forms Contact Form – The Drag and Drop Form Builder for WordPress

The Ninja Forms Contact Form WordPress plugin before 3.6.10 does not sanitize and escape some imported data, allowing high privilege users to perform Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed.