Page Builder KingComposer <= 2.9.6 - Open Redirect
18Vexday Risk Score
Patch soon. It has a working public exploit.
ssvc Attendepss 4.3%
exploitation probability
4.3%top 10% of all CVEs
observed exploitation
nono source reports it
The Page Builder KingComposer WordPress plugin through 2.9.6 does not validate the id parameter before redirecting the user to it via the kc_get_thumbn AJAX action available to both unauthenticated and authenticated users