ESLog inGet started free

Vulnerabilities of the ndk_advanced_custom_fields module

4 known security advisories for this PrestaShop module, with affected versions and the version that fixes it.

IDAdvisorySeverityAffected versionsPublishedFix
CVE-2022-40841 A cross-site scripting (XSS) vulnerability in NdkAdvancedCustomizationFields v3.5.0 allows attackers to execute… Medium 6.1 ≤ 3.5.0 2022-12-21 No
CVE-2022-40842 ndk design NdkAdvancedCustomizationFields 3.5.0 is vulnerable to Server-side request forgery (SSRF) via rotateimg.php. Critical 9.1 ≤ 3.5.0 2022-11-22 No
CVE-2022-40840 ndk design NdkAdvancedCustomizationFields 3.5.0 is vulnerable to Cross Site Scripting (XSS) via createPdf.php. Medium 6.1 ≤ 3.5.0 2022-11-02 No
CVE-2022-40839 A SQL injection vulnerability in the height and width parameter in NdkAdvancedCustomizationFields v3.5.0 allows… High 7.5 = 3.5.0 2022-11-01 No

Is ndk_advanced_custom_fields installed on your shop?

PrestaShield detects the installed version and alerts you if it is affected.
Check if my shop is affected