Read the docs

Saturday Drive

Records95All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical11CVSS 9.0–10.0
CVSS high29CVSS 7.0–8.9

Exploited now

Saturday Drive records in CISA KEV

No Saturday Drive vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Ninja Forms 57 records HIGH Ninja Forms File Uploads 4 records HIGH Contact Form 1 record LOW Ninja Forms Contact Form 1 record MEDIUM Ninjaforms 1 record MEDIUM

Records

1 record in Contact Form · all components

TI-2021-06673 CVE-2021-24381 · GHSA-57gv-mm7f-cwg6

NinjaForms < 3.5.8.2 - Admin+ Stored Cross-Site Scripting

Priority LOW 23

The Ninja Forms Contact Form WordPress plugin before 3.5.8.2 does not sanitise and escape the custom class name of the form field created, which could allow high privilege users to perform Cross-Site Scripting attacks ev…

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00617 Published 2021-10-25 Fixed in 3.5.8.2 CWE-79
Open these records in search →