Nixpkgs security tracker

Login with GitHub
⚠️ You are using a production deployment that is still only suitable for demo purposes. Any work done in this might be wiped later without notice.

Details of issue NIXPKGS-2025-0010

NIXPKGS-2025-0010
published on
Permalink CVE-2025-31384
7.1 HIGH
  • CVSS version: 3.1
  • Attack vector (AV): NETWORK
  • Attack complexity (AC): LOW
  • Privileges required (PR): NONE
  • User interaction (UI): REQUIRED
  • Scope (S): CHANGED
  • Confidentiality impact (C): LOW
  • Integrity impact (I): LOW
  • Availability impact (A): LOW
updated 6 months, 3 weeks ago by @Erethon Activity log
  • Created automatic suggestion 1 year ago
  • @LeSuisse dismissed 1 year ago
  • @Erethon accepted 9 months, 3 weeks ago
  • @Erethon added maintainer @Erethon 6 months, 4 weeks ago maintainer.add
  • @Erethon deleted maintainer @Erethon 6 months, 4 weeks ago maintainer.delete
  • @Erethon published on GitHub 6 months, 3 weeks ago
WordPress Videos plugin <= 1.0.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Aviplugins Videos allows Reflected XSS.This issue affects Videos: from n/a through 1.0.5.

Affected products

videos
  • =<1.0.5

Matching in nixpkgs

Package maintainers