critical9.1
CVE-2022-40842
ndk design NdkAdvancedCustomizationFields 3.5.0 is vulnerable to Server-side request forgery (SSRF) via rotateimg.php.
Impact
ndk design NdkAdvancedCustomizationFields 3.5.0 is vulnerable to Server-side request forgery (SSRF) via rotateimg.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ndk-Design | Ndkadvancedcustomizationfields | through 3.5.0 |