Executive brief
Unauthenticated Cross Site Scripting (XSS) in Ninja Forms <= 3.15.3 versions.
Junglewise Threat Intelligence
CVE-2026-95515 · Severity: high · CVSS 7.1 · Published 2026-09-23
Unauthenticated Cross Site Scripting (XSS) in Ninja Forms <= 3.15.3 versions.