NdkAdvancedCustomizationFields 跨站脚本漏洞

NdkAdvancedCustomizationFields is an advanced customization field from Ndk. A security vulnerability exists in NdkAdvancedCustomizationFields version 3.5.0, which stems from the vulnerability of createPdf.php to cross-site scripting XSS attacks...

PT-2022-25571 · Unknown · Ndkadvancedcustomizationfields

Name of the Vulnerable Software and Affected Versions: NdkAdvancedCustomizationFields version 3.5.0 Description: The issue concerns a Cross Site Scripting XSS problem. It can be exploited via the createPdf.php endpoint. Recommendations: For version 3.5.0, update to a newer version that contains a...