blogroll_fun vulnerabilities

CVEs whose affected-version data names the blogroll_fun package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2014-125132Medium· 6.1

yesterday

Blogroll Fun WordPress Plugin < 0.8.5 Reflected XSS via blogroll.php

Blogroll Fun plugin for WordPress before 0.8.5 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts through the 'k' parameter in blogroll.php. Attackers can craft GET requests to…

▾ SunlitJason Newman · Blogroll Funvia CVEORG