Read the docs

Saturday Drive

Records95All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical11CVSS 9.0–10.0
CVSS high29CVSS 7.0–8.9

Exploited now

Saturday Drive records in CISA KEV

No Saturday Drive vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Ninja Forms 57 records HIGH Ninja Forms File Uploads 4 records HIGH Contact Form 1 record LOW Ninja Forms Contact Form 1 record MEDIUM Ninjaforms 1 record MEDIUM

Records

4 records in Ninja Forms File Uploads · all components

TI-2022-00792 CVE-2022-0888 · GHSA-6g4g-f39p-q93f

Ninja Forms - File Uploads Extension <= 3.3.0 - Arbitrary File Upload

Priority HIGH 69

The Ninja Forms - File Uploads Extension WordPress plugin is vulnerable to arbitrary file uploads due to insufficient input file type validation found in the ~/includes/ajax/controllers/uploads.php file which can be bypa…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.39393 Published 2022-03-23 No fix listed CWE-434
TI-2022-00793 CVE-2022-0889 · GHSA-fvgm-c3gh-jgmj

Ninja Forms - File Uploads Extension <= 3.3.12 - Reflected Cross-Site Scripting

Priority LOW 33

The Ninja Forms - File Uploads Extension WordPress plugin is vulnerable to reflected cross-site scripting due to missing sanitization of the files filename parameter found in the ~/includes/ajax/controllers/uploads.php f…

CVSS 3.1HIGH 7.2 Network No auth No interaction EPSS 0.00776 Published 2022-03-23 No fix listed CWE-79
Open these records in search →