CVE-2022-40839

HIGH CVSS: 7.5 Published: 2022-11-01 Modified: 2026-07-09

Description

A SQL injection vulnerability in the height and width parameter in NdkAdvancedCustomizationFields v3.5.0 allows unauthenticated attackers to exfiltrate database data.

Affected Platforms

Ndk-Design Ndkadvancedcustomizationfields

Weakness Type

CWE-89, CWE-89

References

https://github.com/daaaalllii/cve-s/blob/main/CVE-2022-40839/poc.txt
https://github.com/daaaalllii/cve-s/blob/main/CVE-2022-40839/poc.txt