← CVE Intelligence

CVE-2022-0165

Page Builder KingComposer <= 2.9.6 - Open Redirect PUBLISHED

Description (CNA)

The Page Builder KingComposer WordPress plugin through 2.9.6 does not validate the id parameter before redirecting the user to it via the kc_get_thumbn AJAX action available to both unauthenticated and authenticated users

Affected (CNA)

Vendor / productVersions
Unknown / Page Builder: KingComposer – Free Drag and Drop page builder by King-Themeaffected 2.9.6 through 2.9.6

CWE

CWE-601

References

ADP enrichment

CVE

No English description supplied.