Skip to content
OpenAdvisories

Vendor

Jason Newman

1 known vulnerabilities.

Products

Blogroll Fun 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.1
    CVE-2014-125132

    Blogroll Fun WordPress Plugin < 0.8.5 Reflected XSS via blogroll.php

    Blogroll Fun plugin for WordPress before 0.8.5 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts through the 'k' parameter in blogroll.php. Attackers can craft GET requests to /wp-content/plugins/b…

    Jason Newman Blogroll Fun Web / CMS