medium6.1
CVE-2020-13486
Knock Knock plugin Open redirection vulnerability
Impact
The Knock Knock plugin before 1.2.8 for Craft CMS allows malicious redirection.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | verbb/knock-knock | < 1.2.8 | 1.2.8 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Verbb | Knock Knock | before 1.2.8 |