title: Ninja Forms < 3.6.26 - Admin+ Stored HTML Injection
description: The Ninja Forms WordPress Ninja Forms Contact Form WordPress plugin before 3.6.26 was affected by a HTML Injection security vulnerability.
problem types: CWE-80 Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
affected:
{
vendor: Unknown
product: Ninja Forms Contact Form
versions:
status: affected, versionType: custom, version: 0, lessThan: 3.6.26
defaultStatus: unaffected
collectionURL: https://wordpress.org/plugins
}