Vulnerabilities

TI-2022-19432 CVE-2022-40841 · GHSA-qx9w-jxjf-5hrp

A cross-site scripting (XSS) vulnerability in NdkAdvancedCustomizationFields v3.5.0…

MEDIUM 60

A cross-site scripting (XSS) vulnerability in NdkAdvancedCustomizationFields v3.5.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payloads injected into the "htmlNodes" parameter.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0051 Published 2022-12-21 No fix listed CWE-79

TI-2022-19433 CVE-2022-40842 · GHSA-r3f7-hpwv-5qc2

ndk design NdkAdvancedCustomizationFields 3.5.0 is vulnerable to Server-side request forgery (SSRF) via rotateimg.php.

HIGH 80

ndk design NdkAdvancedCustomizationFields 3.5.0 is vulnerable to Server-side request forgery (SSRF) via rotateimg.php.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00885 Published 2022-11-22 No fix listed CWE-918

TI-2022-19431 CVE-2022-40840 · GHSA-6ccc-7p96-fprw

ndk design NdkAdvancedCustomizationFields 3.5.0 is vulnerable to Cross Site Scripting (XSS) via createPdf.php.

LOW 28

ndk design NdkAdvancedCustomizationFields 3.5.0 is vulnerable to Cross Site Scripting (XSS) via createPdf.php.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00672 Published 2022-11-02 No fix listed CWE-79

TI-2022-19430 CVE-2022-40839 · GHSA-54pv-jxwv-8cvv

A SQL injection vulnerability in the height and width parameter in…

HIGH 72

A SQL injection vulnerability in the height and width parameter in NdkAdvancedCustomizationFields v3.5.0 allows unauthenticated attackers to exfiltrate database data.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.0122 Published 2022-11-01 No fix listed CWE-89

Vulnerabilities

Filters

A cross-site scripting (XSS) vulnerability in NdkAdvancedCustomizationFields v3.5.0…

ndk design NdkAdvancedCustomizationFields 3.5.0 is vulnerable to Server-side request forgery (SSRF) via rotateimg.php.

ndk design NdkAdvancedCustomizationFields 3.5.0 is vulnerable to Cross Site Scripting (XSS) via createPdf.php.

A SQL injection vulnerability in the height and width parameter in…