Published
Permalink
CVE-2025-49053
5.9 MEDIUM
- CVSS version: 3.1
- Attack vector (AV): NETWORK
- Attack complexity (AC): LOW
- Privileges required (PR): HIGH
- User interaction (UI): REQUIRED
- Scope (S): CHANGED
- Confidentiality impact (C): LOW
- Integrity impact (I): LOW
- Availability impact (A): LOW
by @fricklerhandwerk Activity log
- Created automatic suggestion
- @fricklerhandwerk ignored package pairdrop
- @fricklerhandwerk accepted
-
@fricklerhandwerk
deleted
maintainer.delete
2 maintainers
- @dit7ya
- @Enzime
- @fricklerhandwerk published on GitHub
WordPress WP Airdrop Manager plugin <= 1.0.5 - Cross Site Scripting (XSS) vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in kadesthemes WP Airdrop Manager allows Stored XSS. This issue affects WP Airdrop Manager: from n/a through 1.0.5.
References
Affected products
airdrop
- =<1.0.5
Matching in nixpkgs
pkgs.airdrop-cli
Use Airdrop from the CLI on macOS written in Swift
-
nixos-unstable 0-unstable-2024-04-13
- nixpkgs-unstable 0-unstable-2024-04-13
- nixos-unstable-small 0-unstable-2024-04-13
-
nixos-25.11 0-unstable-2025-07-14
- nixpkgs-25.11-darwin 0-unstable-2025-07-14
Package maintainers
Ignored maintainers (1)
-
@Enzime Michael Hoang