Knock Knock plugin Open redirection vulnerability

MÉDIO 6.1CVE-2020-13486 · GHSA-m69r-4h68-xq7j · Published 25/05/2020 · updated 17/06/2026

Em resumo

CVE-2020-13486 é uma vulnerabilidade MÉDIO (CVSS 6.1) que afeta verbb/knock-knock, knock knock (verbb).
Chance de exploração nos próximos 30 dias (EPSS): 0.68%, maior que 52.4% das vulnerabilidades.
Correção: atualize para 1.2.8 ou posterior.

Package	Affected versions	Patched versions
verbb/knock-knock Packagist	`< 1.2.8`	`1.2.8`
knock knock verbb	`< 1.2.8`	`1.2.8`

The Knock Knock plugin before 1.2.8 for Craft CMS allows malicious redirection.

NVD description

The Knock Knock plugin before 1.2.8 for Craft CMS allows malicious redirection.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.