MEDIUM6.1
GHSA-m69r-4h68-xq7j
Knock Knock plugin Open redirection vulnerability
Quick fix
GHSA-m69r-4h68-xq7j — verbb/knock-knock: upgrade to the fixed version with the command below.
composer require verbb/knock-knock:^1.2.8Details
The Knock Knock plugin before 1.2.8 for Craft CMS allows malicious redirection.
Are you affected?
Enter the version of the package you're using.
Affected packages
Packagist/verbb/knock-knock
Introduced in:
0Fixed in: 1.2.8Fix
composer require verbb/knock-knock:^1.2.8