WordPress Plugin Vulnerabilities

Knews 1.1.0 - wysiwyg/fontpicker/index.php ff Parameter XSS

Description

The Knews Multilingual Newsletters WordPress plugin was affected by a wysiwyg/fontpicker/index.php ff Parameter XSS security vulnerability.

Affects Plugins

Plugin icon
knews
Fixed in 1.1.1

Classification

Type
XSS
OWASP top 10
A7: Cross-Site Scripting (XSS)
CWE
CWE-79

Miscellaneous

Verified
No
WPVDB ID
e6282540-96ea-421f-a9fa-c413cf8a3c3a

Timeline

Publicly Published
2014-08-01 (about 11 years ago)
Added
2014-08-01 (about 11 years ago)
Last Updated
2015-05-15 (about 10 years ago)

Other

Published
Title
Published
2025-03-24
Title
Clink <= 1.2.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2024-04-29
Title
Giphypress <= 1.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting
Published
2023-09-01
Title
WP-dTree <= 4.4.5 - Reflected XSS
Published
2022-08-09
Title
Social Slider Feed < 2.0.7 - Admin+ Stored XSS via Feeds
Published
2024-10-31
Title
Meta Store Elements <= 1.0.9 - Authenticated (Contributor+) Stored Cross-Site Scripting