https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-22T20:01:02.589579+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-204630 EUVD-2026-204630 2026-10-22T20:01:02.593650+00:00 EUVD-2026-204630 https://cve.radiocsirt.org/vuln/fkie_cve-2024-29220 fkie_cve-2024-29220 2026-10-22T20:01:02.593704+00:00

Ninja Forms prior to 3.8.1 contains a cross-site scripting vulnerability in custom fields for labels. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is accessing to the website using the product.

 https://cve.radiocsirt.org/vuln/ghsa-72h6-54fg-6qph GHSA-72h6-54fg-6qph 2026-10-22T20:01:02.593753+00:00

Ninja Forms prior to 3.8.1 contains a cross-site scripting vulnerability in custom fields for labels. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is accessing to the website using the product.

 https://cve.radiocsirt.org/vuln/gsd-2024-29220 gsd-2024-29220 2026-10-22T20:01:02.593779+00:00 gsd-2024-29220 https://cve.radiocsirt.org/vuln/jvndb-2024-000038 jvndb-2024-000038 2026-10-22T20:01:02.593798+00:00

WordPress Plugin "Ninja Forms" provided by Saturday Drive contains multiple vulnerabilities listed below. * Cross-site request forgery (CWE-352) - CVE-2024-25572 * Stored cross-site scripting in submit processing (CWE-79) - CVE-2024-26019 * Stored cross-site scripting in custom fields for labels (CWE-79) - CVE-2024-29220 CVE-2024-25572 Kohei Agena reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. CVE-2024-26019, CVE-2024-29220 Ryotaro Imamura of SB Technology Corp. reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.