VULNERABILITY INTELLIGENCE

CVE-2022-40839

CVSS score7.5 HIGH

EPSS probability1.22%

CISA KEVNot currently listed

Published2022-11-01

Last modified2026-07-09

Description

A SQL injection vulnerability in the height and width parameter in NdkAdvancedCustomizationFields v3.5.0 allows unauthenticated attackers to exfiltrate database data.