CVE-2020-13486 - The Knock Knock plugin before 1.2.8 for Craft CMS allows malicious redirection

MEDIUM

The Knock Knock plugin before 1.2.8 for Craft CMS allows malicious redirection

Published May 25, 2020

6.1

MEDIUM

CVSS 3.1

EPSS 0.68%

The Knock Knock plugin before 1.2.8 for Craft CMS allows malicious redirection.

No remediation recorded yet.

Weaknesses (1)

CWE-601

Open Redirect

Link	Providers	Tags
https://github.com/advisories/GHSA-m69r-4h68-xq7j		Advisory
https://github.com/verbb/knock-knock/blob/craft-3/CHANGELOG.md		x_refsource_MISCRelease NotesThird Party Advisory
https://nvd.nist.gov/vuln/detail/CVE-2020-13486

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published May 25, 2020

Updated Aug 4, 2024

Reserved May 25, 2020

Updated n/a

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a

Assigner n/a

Published n/a

Updated n/a

Exploited since n/a

Link n/a