CVE-2018-7280

The Ninja Forms plugin before 3.2.14 for WordPress has XSS.