CVE-2022-0165: vulnerability in Page Builder: KingComposer – Free Drag and…
Page Builder KingComposer <= 2.9.6 - Open Redirect
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
18Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 4.3%
The Page Builder KingComposer WordPress plugin through 2.9.6 does not validate the id parameter before redirecting the user to it via the kc_get_thumbn AJAX action available to both unauthenticated and authenticated users
Affected products
Unknown · Page Builder: KingComposer – Free Drag and Drop page builder by King-ThemeRelated CVEs — Page Builder: KingComposer – Free Drag and…
In the same product, most dangerous first.