Advisories · Technology

Saturday Drive Ninja Forms - Scheduled Exports.

Every CVE that names Saturday Drive Ninja Forms - Scheduled Exports among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-87870 CVE record

CVSS 6.4 Medium

Ninja Forms - Scheduled Exports <= 3.0.3 - Authenticated (Subscriber+) Stored Cross-Site Scripting via REST API Parameters
- Saturday Drive Ninja Forms - Scheduled Exports
- Cross-site scripting (XSS)
Not analysed yet 10 Sept 2026