https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T22:35:52.119287+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2022-0889 CVE-2022-0889 — Ninja Forms - File Uploads Extension <= 3.3.12 - Reflected Cross-Site Scripting 2026-10-04T22:35:52.120913+00:00

Affected: SaturdayDrive Ninja Forms - File Uploads

The Ninja Forms - File Uploads Extension WordPress plugin is vulnerable to reflected cross-site scripting due to missing sanitization of the files filename parameter found in the ~/includes/ajax/controllers/uploads.php file which can be used by unauthenticated attackers to add malicious web scripts to vulnerable WordPress sites, in versions up to and including 3.3.12.