https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-25T12:18:05.881051+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/cve-2014-125132 CVE-2014-125132 — Blogroll Fun WordPress Plugin < 0.8.5 Reflected XSS via blogroll.php 2026-10-25T12:18:05.882505+00:00

Affected: Jason Newman Blogroll Fun

Blogroll Fun plugin for WordPress before 0.8.5 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject scripts through the 'k' parameter in blogroll.php. Attackers can craft GET requests to /wp-content/plugins/blogroll-fun/blogroll.php with malicious 'k' values that are echoed unsanitized, executing JavaScript in victims' browsers. Exploitation evidence was first observed by the Shadowserver Foundation on 2023-10-19.