Lucene search
HistoryDec 21, 2022 - 6:15 p.m.
CVE-2022-40841
cve
2022
40841
xss
vulnerability
ndkadvancedcustomizationfields
nvd
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
35.8%
A cross-site scripting (XSS) vulnerability in NdkAdvancedCustomizationFields v3.5.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payloads injected into the “htmlNodes” parameter.
Affected configurations
Node
ndk-designndkadvancedcustomizationfieldsRange≤3.5.0prestashop
| CPE | Name | Operator | Version |
|---|---|---|---|
| ndk-design:ndkadvancedcustomizationfields | ndk-design ndkadvancedcustomizationfields | le | 3.5.0 |
Related
cvelist
cvelist
CVE-2022-40841
2022-12-21 00:00:00
prion
prion
Cross site scripting
2022-12-21 18:15:00
nvd
nvd
CVE-2022-40841
2022-12-21 18:15:08
6.1 Medium
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
LOW
Integrity Impact
LOW
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
0.001 Low
EPSS
Percentile
35.8%
Related for CVE-2022-40841