K-news vulnerabilities

CVEs whose affected-version data names the K-news package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2012-20004Medium· 6.1

yesterday

K-news WordPress Plugin < 1.1.1 Reflected XSS via fontpicker index.php ff Parameter

K-news plugin for WordPress before 1.1.1 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject script by supplying unsanitized input through the 'ff' parameter. Attackers can craft GET re…

▾ SunlitCarles Reverter · K-newsvia CVEORG