Ninja Forms < 3.6.10 - Admin+ Stored Cross-Site Scripting via Import

- Make a test form and then export it to your system.
- Edit the file and enter an XSS payload like "<img src=x onerror=alert('XSS')" inside the title object in the JSON file.
- Go back to the import/export tab and notice that the payload was executed