Ndk-design Ndkadvancedcustomizationfields — known CVE vulnerabilities

Every CVE whose affected-product data names Ndk-design Ndkadvancedcustomizationfields, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2022-40842 — CVSS 9.1 (critical): ndk design NdkAdvancedCustomizationFields 3.5.0 is vulnerable to Server-side request forgery (SSRF) via rotateimg.php.
• CVE-2022-40839 — CVSS 7.5 (high): A SQL injection vulnerability in the height and width parameter in NdkAdvancedCustomizationFields v3.5.0 allows unauthenticated attackers…
• CVE-2022-40840 — CVSS 6.1 (medium): ndk design NdkAdvancedCustomizationFields 3.5.0 is vulnerable to Cross Site Scripting (XSS) via createPdf.php.
• CVE-2022-40841 — CVSS 6.1 (medium): A cross-site scripting (XSS) vulnerability in NdkAdvancedCustomizationFields v3.5.0 allows attackers to execute arbitrary web scripts or…