Lucene search
PRIOn knowledge basePRION:CVE-2022-0165HistoryMar 14, 2022 - 3:15 p.m.
Code injection
2022-03-1415:15:00
PRIOn knowledge base
www.prio-n.com
6
0.001 Low
EPSS
Percentile
41.7%
The Page Builder KingComposer WordPress plugin through 2.9.6 does not validate the id parameter before redirecting the user to it via the kc_get_thumbn AJAX action available to both unauthenticated and authenticated users
| CPE | Name | Operator | Version |
|---|---|---|---|
| kingcomposer | le | 2.9.6 |
Related
githubexploit
githubexploit
Exploit for Open Redirect in King-Theme Kingcomposer
2023-08-09 11:53:18
Exploit for Open Redirect in King-Theme Kingcomposer
2024-05-29 04:00:25
nvd
nvd
CVE-2022-0165
2022-03-14 15:15:09
wpvulndb
wpvulndb
Page Builder KingComposer <= 2.9.6 - Open Redirect
2022-02-16 00:00:00
wpexploit
wpexploit
Page Builder KingComposer <= 2.9.6 - Open Redirect
2022-02-16 00:00:00
patchstack
patchstack
WordPress KingComposer plugin <= 2.9.6 - Open Redirect vulnerability
2022-02-16 00:00:00
cvelist
cvelist
CVE-2022-0165 Page Builder KingComposer <= 2.9.6 - Open Redirect
2022-03-14 14:41:21
nuclei
nuclei
WordPress Page Builder KingComposer <=2.9.6 - Open Redirect
2022-05-05 16:55:21
cve
cve
CVE-2022-0165
2022-03-14 15:15:09