Lucene search
+L

6 matches found

RedhatCVE
RedhatCVE
•added 2025/05/22 11:40 p.m.•17 views

CVE-2022-40841

A cross-site scripting XSS vulnerability in NdkAdvancedCustomizationFields v3.5.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payloads injected into the "htmlNodes" parameter...

6.1CVSS5.7AI score0.00491EPSS
SaveExploits1References1
OSV
OSV
•added 2022/12/21 6:15 p.m.•14 views

CVE-2022-40841

A cross-site scripting XSS vulnerability in NdkAdvancedCustomizationFields v3.5.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payloads injected into the "htmlNodes" parameter...

6.1CVSS5.9AI score0.00491EPSS
SaveExploits1References2
Prion
Prion
•added 2022/12/21 6:15 p.m.•30 views

Cross site scripting

A cross-site scripting XSS vulnerability in NdkAdvancedCustomizationFields v3.5.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payloads injected into the "htmlNodes" parameter...

5.8CVSS5.9AI score0.00491EPSS
SaveExploits1References2Affected Software1
Positive Technologies
Positive Technologies
•added 2022/12/21 12:00 a.m.•16 views

PT-2022-25572 · Unknown · Ndkadvancedcustomizationfields

Name of the Vulnerable Software and Affected Versions: NdkAdvancedCustomizationFields version 3.5.0 Description: A cross-site scripting XSS issue allows attackers to execute arbitrary web scripts or HTML via crafted payloads injected into the htmlNodes parameter. This enables attackers to...

6.1CVSS6AI score0.00491EPSS
SaveExploits1References5
CNNVD
CNNVD
•added 2022/12/21 12:00 a.m.•15 views

NdkAdvancedCustomizationFields 跨站脚本漏洞

NdkAdvancedCustomizationFields is an advanced customization field from Ndk. A security vulnerability exists in NdkAdvancedCustomizationFields version v3.5.0, which originates from Cross-Site Scripting XSS and allows attackers to execute arbitrary web script or HTML via a crafted payload injected...

6.1CVSS6.6AI score0.00491EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/12/21 12:00 a.m.•2 views

CVE-2022-40841: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in NdkAdvancedCustomizationFields v3.5.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payloads injected into the "htmlNodes" parameter...

6.1CVSS6.1AI score0.00491EPSS
SaveExploits1References4
Rows per page
Query Builder