Nixpkgs security tracker

Permalink CVE-2024-54245

6.5 MEDIUM

CVSS version: 3.1
Attack vector (AV): NETWORK
Attack complexity (AC): LOW
Privileges required (PR): LOW
User interaction (UI): REQUIRED
Scope (S): CHANGED
Confidentiality impact (C): LOW
Integrity impact (I): LOW
Availability impact (A): LOW

updated 1 year, 4 months ago by @LeSuisse Activity log

Created automatic suggestion 1 year, 4 months ago
@LeSuisse dismissed 1 year, 4 months ago

WordPress Clients plugin <= 1.1.4 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Think201 Clients allows Stored XSS.This issue affects Clients: from n/a through 1.1.4.

References

https://patchstack.com/database/wordpress/plugin/clients/vulnerability/wordpres… vdb-entry

Affected products

clients

=<1.1.4

Matching in nixpkgs

pkgs.argus-clients

Clients for ARGUS

nixos-unstable 3.0.8.3
- nixpkgs-unstable 3.0.8.3
- nixos-unstable-small 3.0.8.3

pkgs.xorg.xlsclients

None

nixos-unstable 1.1.5
- nixpkgs-unstable 1.1.5
- nixos-unstable-small 1.1.5

pkgs.haskellPackages.clientsession

Securely store session data in a client-side cookie

nixos-unstable 0.9.2.0
- nixpkgs-unstable 0.9.2.0
- nixos-unstable-small 0.9.2.0

pkgs.haskellPackages.wai-session-clientsession

Session store based on clientsession

nixos-unstable 0.1
- nixpkgs-unstable 0.1
- nixos-unstable-small 0.1

Package maintainers

@leenaars Michiel Leenaars <ml.software@leenaa.rs>

Suggestions search