CVE-2023-1835

CVE-2023-1835 is a Reflected Cross-Site Scripting (XSS) vulnerability affecting the Ninja Forms Contact Form WordPress plugin prior to version 3.6.22. This medium-severity vulnerability, with a CVSS score of 6.1, allows an attacker to inject malicious scripts due to improper escaping of user input on an administrative page. Exploitation requires user interaction from a high-privilege user, such as an administrator, and could lead to information disclosure or unauthorized actions. While there is no evidence of active exploitation or Metasploit modules, a Nuclei template exists, and community discussion and media coverage are minimal.