CVE-2023-5530

Summary

CVE-2023-5530 is a vulnerability affecting the Ninja Forms Contact Form plugin for WordPress. This issue allows high privilege users, including admins, to execute Stored XSS attacks due to insufficient sanitization and escaping of label fields. Users with the unfiltered_html capability can exploit this vulnerability. Despite the existence of this capability, the vendor acknowledged and released a fix for the issue.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.