K-news WordPress Plugin < 1.1.1 Reflected XSS via fontpicker index.php ff Parameter

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2012-20004 · Microsoft / collected KEV context

cve-program · CVE-2012-20004

• https://www.exploit-db.com/exploits/37484
• http://web.archive.org/web/20210213220043/https://www.securityfocus.com/bid/54330/info
• https://www.acunetix.com/vulnerabilities/web/wordpress-plugin-knews-multilingual-newsletters-ff-parameter-cross-site-scripting-1-1-0
• https://github.com/projectdiscovery/nuclei-templates/blob/main/http/vulnerabilities/wordpress/wp-knews-xss.yaml
• https://wordpress.org/plugins/knews/
• https://www.vulncheck.com/advisories/k-news-wordpress-plugin-1.1.1-reflected-xss-via-fontpicker-index-php-ff-parameter

No related operational record is retained in the current change model.