Nixpkgs security tracker

Untriaged

Permalink CVE-2025-62068

6.5 MEDIUM

CVSS version: 3.1
Attack vector (AV): NETWORK
Attack complexity (AC): LOW
Privileges required (PR): LOW
User interaction (UI): REQUIRED
Scope (S): CHANGED
Confidentiality impact (C): LOW
Integrity impact (I): LOW
Availability impact (A): LOW

created 4 months, 3 weeks ago Activity log

Created suggestion 4 months, 3 weeks ago

WordPress e2pdf plugin <= 1.28.09 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in E2Pdf e2pdf e2pdf.This issue affects e2pdf: from n/a through <= 1.28.09.

References

https://vdp.patchstack.com/database/Wordpress/Plugin/e2pdf/vulnerability/wordpr… vdb-entry
https://vdp.patchstack.com/database/Wordpress/Plugin/e2pdf/vulnerability/wordpr… vdb-entry
https://patchstack.com/database/Wordpress/Plugin/e2pdf/vulnerability/wordpress-… vdb-entry

Affected products

e2pdf

=<<= 1.28.09

Matching in nixpkgs

pkgs.haskellPackages.line2pdf

Simple command-line utility to convert text into PDF

nixos-unstable 0.0.7
- nixpkgs-unstable 0.0.7
- nixos-unstable-small 0.0.7

Suggestion detail

References

Affected products

Matching in nixpkgs

pkgs.haskellPackages.line2pdf