CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2022-40841

A cross-site scripting (XSS) vulnerability in NdkAdvancedCustomizationFields v3.5.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payloads injected into the "htmlNodes" parameter.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.005

EPSS Ranking 39.1%

CVSS Severity

CVSS v3 Score 6.1

References

https://github.com/daaaalllii/cve-s/blob/main/CVE-2022-40841/poc.txt
https://github.com/daaaalllii/cve-s/blob/main/CVE-2022-40841/poc.txt

Products affected by CVE-2022-40841

Ndk-Design » Ndkadvancedcustomizationfields » Version: N/A

cpe:2.3:a:ndk-design:ndkadvancedcustomizationfields:-
Ndk-Design » Ndkadvancedcustomizationfields » Version: 3.5.0

cpe:2.3:a:ndk-design:ndkadvancedcustomizationfields:3.5.0

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2022-40841

Products

Pricing

Contact Us