Non notée
CVE-2022-0165 The Page Builder KingComposer WordPress plugin through 2.9.6 does not validate the id parameter before redirecting the…
Description
The Page Builder KingComposer WordPress plugin through 2.9.6 does not validate the id parameter before redirecting the user to it via the kc_get_thumbn AJAX action available to both unauthenticated and authenticated users
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Page Builder: KingComposer – Free Drag and Drop page builder by King-Theme | 2.9.6 | Pas de correctif indiqué |