CVE-2022-40839: Ndk-Design Ndkadvancedcustomizationfields

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

A SQL injection vulnerability in the height and width parameter in NdkAdvancedCustomizationFields v3.5.0 allows unauthenticated attackers to exfiltrate database data.

Affected products

• Ndk-Design Ndkadvancedcustomizationfields: version 3.5.0 only

Published 2022-11-01. Last modified 2026-07-09.