HIGH Published Sep 30, 2026 CVE-2026-102385 CVE-2026-102385 published: Unauthenticated Cross Site Scripting (XSS) in Ninja Forms <= 3.15.3 versions. View full NVD advisory → Related reading How CVE Scoring Works: Understanding CVSS Severity Ratings ← Back to CVE watch