Nixpkgs security tracker
Permalink
CVE-2025-32230
4.3 MEDIUM
- CVSS version: 3.1
- Attack vector (AV): NETWORK
- Attack complexity (AC): LOW
- Privileges required (PR): LOW
- User interaction (UI): NONE
- Scope (S): UNCHANGED
- Confidentiality impact (C): NONE
- Integrity impact (I): LOW
- Availability impact (A): NONE
WordPress Tutor LMS plugin <= 3.4.0 - HTML Injection vulnerability
Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS) vulnerability in Themeum Tutor LMS. This issue affects Tutor LMS: from n/a through 3.4.0.
References
Affected products
tutor
- =<3.4.0
Matching in nixpkgs
pkgs.emacsPackages.evil-tutor
None
-
nixos-unstable 20150103.653
- nixpkgs-unstable 20150103.653
- nixos-unstable-small 20150103.653
pkgs.emacsPackages.evil-tutor-ja
None
-
nixos-unstable 20160917.132
- nixpkgs-unstable 20160917.132
- nixos-unstable-small 20160917.132
pkgs.emacsPackages.evil-tutor-sc
None
-
nixos-unstable 20240326.1239
- nixpkgs-unstable 20240326.1239
- nixos-unstable-small 20240326.1239
pkgs.haskellPackages.timeless-tutorials
Initial project template from stack