NdkAdvancedCustomizationFields 跨站脚本漏洞

NdkAdvancedCustomizationFields is an advanced customization field from Ndk. A security vulnerability exists in NdkAdvancedCustomizationFields version 3.5.0, which stems from the vulnerability of createPdf.php to cross-site scripting XSS attacks...

CVE-2022-40840

CVE-2022-40840 affects NdkAdvancedCustomizationFields 3.5.0 and is exposed to Cross-Site Scripting via the createPdf.php endpoint. The available connected documents indicate the issue is an XSS vulnerability; no exploit code or in-the-wild details are provided. Remediation information across sour...

CVE-2022-40840

ndk design NdkAdvancedCustomizationFields 3.5.0 is vulnerable to Cross Site Scripting XSS via createPdf.php...

CVE-2022-40839

A SQL injection vulnerability in the height and width parameter in NdkAdvancedCustomizationFields v3.5.0 allows unauthenticated attackers to exfiltrate database data...

Sql injection

A SQL injection vulnerability in the height and width parameter in NdkAdvancedCustomizationFields v3.5.0 allows unauthenticated attackers to exfiltrate database data...

PT-2022-25569 · Unknown · Ndkadvancedcustomizationfields

Name of the Vulnerable Software and Affected Versions: NdkAdvancedCustomizationFields version 3.5.0 Description: A SQL injection issue in the height and width parameters allows unauthenticated attackers to exfiltrate database data. Recommendations: For NdkAdvancedCustomizationFields version 3.5.0...

CVE-2022-40839

A SQL injection vulnerability in the height and width parameter in NdkAdvancedCustomizationFields v3.5.0 allows unauthenticated attackers to exfiltrate database data...

CVE-2022-40839

A SQL injection vulnerability in the height and width parameter in NdkAdvancedCustomizationFields v3.5.0 allows unauthenticated attackers to exfiltrate database data...

CVE-2022-40839

CVE-2022-40839 is a SQL injection vulnerability in the height and width parameters of NdkAdvancedCustomizationFields v3.5.0. The issue allows unauthenticated remote attackers to exfiltrate database data. CVSSv3.1 base score 7.5 (HIGH) with Network attack vector, low attack complexity, no privileg...