4 matches found
CVE-2019-9910
The kingcomposer plugin 2.7.6 for WordPress has wp-admin/admin.php?page=kc-mapper id XSS...
Kingcomposer Cross-Site Scripting Vulnerability
WordPress plugin KingComposer is a professional backend and frontend page builder plugin. A cross-site scripting vulnerability exists in the wp-admin/admin.php?page=kc-mapper page in version 2.7.6 of the WordPress kingcomposer plugin. A remote attacker can exploit the vulnerability to execute...
PT-2019-19928
Name of the Vulnerable Software and Affected Versions kingcomposer plugin version 2.7.6 Description The issue affects the kingcomposer plugin for WordPress, where an XSS vulnerability is present in the wp-admin/admin.php?page=kc-mapper endpoint, specifically with the id parameter. Recommendations...
