Aller au contenu
Non notée

CVE-2022-0165 The Page Builder KingComposer WordPress plugin through 2.9.6 does not validate the id parameter before redirecting the…

Description

The Page Builder KingComposer WordPress plugin through 2.9.6 does not validate the id parameter before redirecting the user to it via the kc_get_thumbn AJAX action available to both unauthenticated and authenticated users

Produits et versions touchés

Produit Versions touchées Corrigé en
Page Builder: KingComposer – Free Drag and Drop page builder by King-Theme 2.9.6 Pas de correctif indiqué
Les 2 CVE de Page Builder: KingComposer – Free Drag and Drop page builder by King-Theme →
Suivre cette CVE