WordPress Page Builder KingComposer <=2.9.6 - Open Redirect
WordPress Page Builder KingComposer 2.9.6 and prior does not validate the id parameter before redirecting the user to it via the kc_get_thumbn AJAX action (which is available to both unauthenticated and authenticated users).
kingcomposerPoC 已收录
CVSS6.1EPSS 52.3%