Lucene search
+L

6 matches found

RedhatCVE
RedhatCVE
•added 2025/05/22 11:40 p.m.•19 views

CVE-2022-40841

A cross-site scripting XSS vulnerability in NdkAdvancedCustomizationFields v3.5.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payloads injected into the "htmlNodes" parameter...

6.1CVSS6.5AI score0.0051EPSS
SaveExploits1References1
osv_cve
osv_cve
•added 2022/12/21 6:15 p.m.•21 views

CVE-2022-40841

A cross-site scripting XSS vulnerability in NdkAdvancedCustomizationFields v3.5.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payloads injected into the "htmlNodes" parameter...

6.1CVSS5.9AI score0.0051EPSS
SaveExploits1References2
Prion
Prion
•added 2022/12/21 6:15 p.m.•36 views

Cross site scripting

A cross-site scripting XSS vulnerability in NdkAdvancedCustomizationFields v3.5.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payloads injected into the "htmlNodes" parameter...

5.8CVSS5.9AI score0.0051EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
•added 2022/12/21 12:00 a.m.•23 views

NDKAdvancedCustomizationFields: Cross-site Scripting Vulnerability

NdkAdvancedCustomizationFields is an advanced customization field from Ndk. A security vulnerability exists in NdkAdvancedCustomizationFields version v3.5.0, which originates from Cross-Site Scripting XSS and allows attackers to execute arbitrary web script or HTML via a crafted payload injected...

6.1CVSS6.6AI score0.0051EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2022/12/21 12:00 a.m.•20 views

PT-2022-25572 · Unknown · Ndkadvancedcustomizationfields

Name of the Vulnerable Software and Affected Versions: NdkAdvancedCustomizationFields version 3.5.0 Description: A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via crafted payloads injected into the htmlNodes parameter. This enables attackers to...

6.1CVSS6AI score0.0051EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/21 12:00 a.m.•8 views

CVE-2022-40841: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in NdkAdvancedCustomizationFields v3.5.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payloads injected into the "htmlNodes" parameter...

6.1CVSS6.1AI score0.0051EPSS
SaveExploits1References4
Rows per page
Query Builder