TI-2012-05491 CVE-2012-20004 · GHSA-3699-42v3-8cc6
Reflected XSS in K-news WordPress plugin via fontpicker ff parameter
Priority MEDIUM 56
K-news plugin for WordPress before 1.1.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject script by supplying unsanitized input through the 'ff' parameter.