CVE-2026-109997 | kstover Ninja Forms Plugin up to 3.15.5 on WordPress Input Sanitization nf_ajax_submit formData.extra cross site scripting

October 31, 2026 Yanac

A vulnerability has been found in kstover Ninja Forms Plugin up to 3.15.5 on WordPress and classified as problematic. Impacted is the function nf_ajax_submit of the component Input Sanitization. The manipulation of the argument formData.extra leads to cross site scripting.

This vulnerability is uniquely identified as CVE-2026-109997. The attack is possible to be carried out remotely. No exploit exists.VulDB Recent EntriesRead More