Carles Reverter CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM Carles Reverter CVE published 2026-10-20

CVE-2012-20004

A reflected cross-site scripting vulnerability exists in the K-news WordPress plugin before version 1.1.1. The vulnerability allows unauthenticated attackers to inject malicious script by supplying unsanitized input through the 'ff' parameter in the fontpicker index.php file. This type of vulnerability can lead to session cookie theft or other malicious activities. Defenders should assess exposure and pri [truncated]