CVE-2014-125132

The Blogroll Fun WordPress plugin (versions before 0.8.5 ) is vulnerable to a reflected cross-site scripting (XSS) flaw. The root cause is the unsanitized echoing of the 'k' parameter in the blogroll.php file. Unauthenticated attackers can craft malicious GET requests to /wp-content/plugins/blogr...