VULNERABILITY INTELLIGENCE

CVE-2021-24889

CVSS score7.2 HIGH
EPSS probability1.32%
CISA KEVNot currently listed
Published2021-11-29
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Description

The Ninja Forms Contact Form WordPress plugin before 3.6.4 does not escape keys of the fields POST parameter, which could allow high privilege users to perform SQL injections attacks

Weakness classification

  • contact@wpscan.com: CWE-89

Primary references