CVE-2022-0165

徽章 许可证 MIT 安装 1. 安装 Python3 和 pip 说明在此（如果你连这个都搞不定，你其实不应该用这个） 通过 pip 安装 root@kitploit: pip install CVE-2022-0165 运行以下命令检查 CVE-2022-0165 -h 配置 2. 我们集成了 Telegram API，用于接收漏洞检测的即时通知。 Telegram 通知 root@kitploit: CVE-2022-0165 --chatid 打开 Telegram 并搜索 @CappricioSecuritiesToolsbot 然后点击开始 用法 3. 该工具有多种用例。...

CVE-2022-0165

The Page Builder KingComposer WordPress plugin through 2.9.6 does not validate the id parameter before redirecting the user to it via the kcgetthumbn AJAX action available to both unauthenticated and authenticated users...

Exploit for Open Redirect in King-Theme Kingcomposer

Badges !MIT Licensehttps://img.shields.io/badge/Licens...

Exploit for Open Redirect in King-Theme Kingcomposer

CVE-2022-0165 - Page Builder KingComposer WordPress Plugin - I...

CVE-2022-0165

The Page Builder KingComposer WordPress plugin through 2.9.6 does not validate the id parameter before redirecting the user to it via the kcgetthumbn AJAX action available to both unauthenticated and authenticated users...

CVE-2022-0165

Summary: WordPress Page Builder KingComposer plugin (versions ≤ 2.9.6) has an open redirect caused by a lack of validation of the id parameter in the kc_get_thumbn AJAX action, which is accessible to both unauthenticated and authenticated users. Impact: attackers can redirect users to malicious s...

CVE-2022-0165 Page Builder KingComposer <= 2.9.6 - Open Redirect

The Page Builder KingComposer WordPress plugin through 2.9.6 does not validate the id parameter before redirecting the user to it via the kcgetthumbn AJAX action available to both unauthenticated and authenticated users...