https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-27T13:20:59.950076+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-7500 EUVD-2026-7500 2026-10-27T13:20:59.952828+00:00 EUVD-2026-7500 https://cve.radiocsirt.org/vuln/fkie_cve-2023-5530 fkie_cve-2023-5530 2026-10-27T13:20:59.952859+00:00

The Ninja Forms Contact Form WordPress plugin before 3.6.34 does not sanitize and escape its label fields, which could allow high privilege users such as admin to perform Stored XSS attacks. Only users with the unfiltered_html capability can perform this, and such users are already allowed to use JS in posts/comments etc however the vendor acknowledged and fixed the issue

 https://cve.radiocsirt.org/vuln/ghsa-8m7g-w3gq-3g84 GHSA-8m7g-w3gq-3g84 2026-10-27T13:20:59.952889+00:00

The Ninja Forms Contact Form WordPress plugin before 3.6.34 does not sanitize and escape its label fields, which could allow high privilege users such as admin to perform Stored XSS attacks. Only users with the unfiltered_html capability can perform this, and such users are already allowed to use JS in posts/comments etc however the vendor acknowledged and fixed the issue

 https://cve.radiocsirt.org/vuln/gsd-2023-5530 gsd-2023-5530 2026-10-27T13:20:59.952906+00:00 gsd-2023-5530