Knock Knock plugin Open redirection vulnerability

MEDIO 6.1CVE-2020-13486 · GHSA-m69r-4h68-xq7j · Published 25/05/2020 · updated 17/06/2026

En resumen

CVE-2020-13486 es una vulnerabilidad MEDIO (CVSS 6.1) que afecta a verbb/knock-knock, knock knock (verbb).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.68%, mayor que el 52.4% de las vulnerabilidades.
Solución: actualizar a 1.2.8 o posterior.

Package	Affected versions	Patched versions
verbb/knock-knock Packagist	`< 1.2.8`	`1.2.8`
knock knock verbb	`< 1.2.8`	`1.2.8`

The Knock Knock plugin before 1.2.8 for Craft CMS allows malicious redirection.

NVD description

The Knock Knock plugin before 1.2.8 for Craft CMS allows malicious redirection.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.