Direct naar de inhoud
⚡ Kritieke cyberalerts voor jouw sector & systemen — direct in je inbox. Aanmelden →
cybernieuws.nl Cybersecurity en informatiebeveiling nieuws alerts live · 13 min 159 bronnen 3 vandaag
CVE's Videos Dagbriefing

← Terug naar CVE-database

CVE-2026-84258

HIGH · 8.8 CVSS Gepubliceerd: CWE-79

Beschrijving

The click5 CRM add-on to Ninja Forms WordPress plugin through 1.0.1 does not sanitise and escape content submitted through an unauthenticated endpoint before outputting it back in an admin page, leading to Stored XSS which could be used against high privilege users such as admin.

References