CVE Catalog
CVE-2026-81773
HighCVSS 7.1Exploitation Probability (EPSS)
Low risk0.18%
8th percentile - higher than 8% of all known CVEs
Summary
Unauthenticated Cross Site Scripting (XSS) in Ninja Forms File Uploads Extension versions up to 3.3.26.
Risk Assessment
An attacker can inject malicious script into the page, potentially leading to data theft or session hijacking.
Recommendation
Update the Ninja Forms File Uploads extension to the latest patched version.
Other vulnerabilities in Ninja Forms File Uploads Extension
Original NVD description (English source)
Unauthenticated Cross Site Scripting (XSS) in Ninja Forms File Uploads Extension <= 3.3.26 versions.