CVE-2012-20004 | Carles Reverter K-news Plugin up to 1.1.0 index.php ff cross site scripting

October 20, 2026 Yanac

A vulnerability marked as problematic has been reported in Carles Reverter K-news Plugin up to 1.1.0. Impacted is an unknown function of the file /wp-content/plugins/knews/wysiwyg/fontpicker/index.php. Performing a manipulation of the argument ff results in cross site scripting. This vulnerability only affects products that are no longer supported by the maintainer.

This vulnerability is identified as CVE-2012-20004. The attack can be initiated remotely. Additionally, an exploit exists.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More