← Database

CVE-2022-40842

CRITICAL CVSS: 9.1 Published: 2022-11-22 Modified: 2026-07-09

Description

ndk design NdkAdvancedCustomizationFields 3.5.0 is vulnerable to Server-side request forgery (SSRF) via rotateimg.php.

Affected Platforms

Ndk-Design Ndkadvancedcustomizationfields

Weakness Type

CWE-918, CWE-918

References