Show filters
4 Total Results
Displaying 1-4 of 4
Sort by:
Attacker Value
Unknown
CVE-2022-40841
Disclosure Date: December 21, 2022 (last updated February 24, 2025)
A cross-site scripting (XSS) vulnerability in NdkAdvancedCustomizationFields v3.5.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payloads injected into the "htmlNodes" parameter.
0
Attacker Value
Unknown
CVE-2022-40842
Disclosure Date: November 22, 2022 (last updated February 24, 2025)
ndk design NdkAdvancedCustomizationFields 3.5.0 is vulnerable to Server-side request forgery (SSRF) via rotateimg.php.
0
Attacker Value
Unknown
CVE-2022-40840
Disclosure Date: November 02, 2022 (last updated February 24, 2025)
ndk design NdkAdvancedCustomizationFields 3.5.0 is vulnerable to Cross Site Scripting (XSS) via createPdf.php.
0
Attacker Value
Unknown
CVE-2022-40839
Disclosure Date: November 01, 2022 (last updated February 24, 2025)
A SQL injection vulnerability in the height and width parameter in NdkAdvancedCustomizationFields v3.5.0 allows unauthenticated attackers to exfiltrate database data.
0
