high7.5
CVE-2022-40839
A SQL injection vulnerability in the height and width parameter in NdkAdvancedCustomizationFields v3.5.0 allows unauthenticated attackers to exfiltrate databas…
Impact
A SQL injection vulnerability in the height and width parameter in NdkAdvancedCustomizationFields v3.5.0 allows unauthenticated attackers to exfiltrate database data.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ndk-Design | Ndkadvancedcustomizationfields | Version 3.5.0 |