CVE-2024-3866

The Ninja Forms Contact Form plugin for WordPress is vulnerable to Reflected Self-Based Cross-Site Scripting via the 'Referer' header in all versions up to, and including, 3.8.15 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link. Successful exploitation of this vulnerability requires "maintenance mode" for a targeted form to be enabled. However, there is no setting available to the attacker or even an administrator-level user to enable this mode. The mode is only enabled during a required update, which is a very short window of time. Additionally, because of the self-based nature of this vulnerability, attackers would have to rely on additional techniques to execute a supplied payload in the context of targeted user.

• CWE-79

• https://plugins.trac.wordpress.org/changeset/3153292/ninja-formsPatch
• https://www.wordfence.com/threat-intel/vulnerabilities/id/f6d6b82d-574d-4a56-9aef-42343c4b7c43?source=cveThird Party Advisory

Published

Sep 25, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-38654Improper bounds checking in Ivanti Secure Access Client befo…4.4
• CVE-2024-38655Argument injection in Ivanti Connect Secure before version 2…7.2
• CVE-2024-38656Argument injection in Ivanti Connect Secure before version 2…9.1
• CVE-2024-38657External control of a file name in Ivanti Connect Secure bef…4.9
• CVE-2024-38658There is an Out-of-bounds read vulnerability in V-Server (v4…7.8
• CVE-2024-38659In the Linux kernel, the following vulnerability has been re…7.1
• CVE-2024-38660Protection mechanism failure in the SPP for some Intel(R) Xe…3.8
• CVE-2024-38661In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-38662In the Linux kernel, the following vulnerability has been re…4.7
• CVE-2024-38663In the Linux kernel, the following vulnerability has been re…5.5
• CVE-2024-38664In the Linux kernel, the following vulnerability has been re…7.8
• CVE-2024-38665Out-of-bounds write in some Intel(R) Graphics Drivers may al…8.4