CVE-2023-1835

MEDIUMNuclei

Ninja Forms < 3.6.22 - Reflected XSS

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2023-1835 has a selected CVSS score of 6.1 (medium); EIP currently links 1 Nuclei template.

Description

The Ninja Forms Contact Form WordPress plugin before 3.6.22 does not properly escape user input before outputting it back in an admin page, leading to a Reflected Cross-Site Scripting which could be used against high privilege users such as admin

Description source: CVE List

Exploitation context

Available material

Nuclei templates
1

CISA SSVC decision

ExploitationPoC
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Jan 14, 2025 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

Ninja Forms Contact Form

Default status: unaffected

CVE ListBefore 3.6.22affected

Nuclei templates

1
ProjectDiscoveryMEDIUMNinja Forms < 3.6.22 - Cross-Site ScriptingCVSS 6.1

Ninja Forms before 3.6.22 is susceptible to cross-site scripting via the page parameter due to insufficient input sanitization and output escaping. An attacker can inject arbitrary script in the browser of an unsuspecting user in the context of the affected site. This can allow the attacker to steal cookie-based authentication credentials and launch other attacks.

Impact

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary JavaScript code in the context of the victim's browser, leading to session hijacking, defacement, or theft of sensitive information.

Remediation

Update to the latest version of Ninja Forms (3.6.22 or higher) to mitigate this vulnerability.

WeaknessesCWE-79
Authorsr3Y3r53
Template tagscve2023cvewpscanninjaformswpwp-pluginwordpressauthenticatedxssninjaformsvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CPE: cpe:2.3:a:ninjaforms:ninja_forms:*:*:*:*:*:wordpress:*:*
Shodan: http.html:/wp-content/plugins/ninja-forms/
FOFA: body=/wp-content/plugins/ninja-forms/
https://wpscan.com/vulnerability/b5fc223c-5ec0-44b2-b2f6-b35f9942d341 https://wordpress.org/plugins/ninja-forms/advanced/ https://nvd.nist.gov/vuln/detail/CVE-2023-1835

Source: ProjectDiscovery

References

2