CVE-2019-9910

概要

参考情報

• seclists.org/fulldisclosure/2019/Mar/39 · Mailing List
• lists.openwall.net/full-disclosure/2019/02/05/11 · Exploit
• security-consulting.icu/blog/2019/02/wordpress-kingcomposer-xss · Exploit

kingcomposer のその他の脆弱性

• CVE-2021-25048中 5.4The KingComposer WordPress plugin through 2.9.6 does not have authorisation, CSRF and sanitisation/escaping when creating profile, allowing …
• CVE-2022-0165中 6.1The Page Builder KingComposer WordPress plugin through 2.9.6 does not validate the id parameter before redirecting the user to it via the kc…
• CVE-2020-15299中 6.1A reflected Cross-Site Scripting (XSS) Vulnerability in the KingComposer plugin through 2.9.4 for WordPress allows remote attackers to trick…