CVE-2014-125132

The Blogroll Fun WordPress plugin (versions before 0.8.5 ) is vulnerable to a reflected cross-site scripting (XSS) flaw. The root cause is the unsanitized echoing of the 'k' parameter in the blogroll.php file. Unauthenticated attackers can craft malicious GET requests to /wp-content/plugins/blogr...

EUVD-2014-9825

Blogroll Fun plugin for WordPress before 0.8.5 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts through the 'k' parameter in blogroll.php. Attackers can craft GET requests to /wp-content/plugins/blogroll-fun/blogroll.php with maliciou...

WordPress Blogroll Fun-Show Last Post and Last Update Time 0.8.4 - Cross-Site Scripting Detection

WordPress Plugin Blogroll Fun-Show Last Post and Last Update Time 0.8.4 and possibly prior versions are prone to a cross-site scripting vulnerability because of a failure to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser ...