medium6.1
CVE-2022-40840
ndk design NdkAdvancedCustomizationFields 3.5.0 is vulnerable to Cross Site Scripting (XSS) via createPdf.php.
Impact
ndk design NdkAdvancedCustomizationFields 3.5.0 is vulnerable to Cross Site Scripting (XSS) via createPdf.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ndk-Design | Ndkadvancedcustomizationfields | through 3.5.0 |