TI-2014-08430 CVE-2014-125132 · GHSA-vcg9-96r7-4fvx
Reflected cross-site scripting in Blogroll Fun WordPress plugin
Priority LOW 23
Blogroll Fun plugin for WordPress before 0.8.5 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts through the 'k' parameter in blogroll.php.