Nixpkgs security tracker

Permalink CVE-2025-31549

6.5 MEDIUM

CVSS version: 3.1
Attack vector (AV): NETWORK
Attack complexity (AC): LOW
Privileges required (PR): LOW
User interaction (UI): REQUIRED
Scope (S): CHANGED
Confidentiality impact (C): LOW
Integrity impact (I): LOW
Availability impact (A): LOW

updated 1 year ago by @LeSuisse Activity log

Created automatic suggestion 1 year ago
@Srylax accepted 1 year ago
@Srylax marked as untriaged 1 year ago
@LeSuisse dismissed 1 year ago

WordPress Fusion plugin <= 1.6.3 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Agency Dominion Inc. Fusion allows DOM-Based XSS. This issue affects Fusion: from n/a through 1.6.3.

References

https://patchstack.com/database/wordpress/plugin/fusion/vulnerability/wordpress… vdb-entry

Affected products

fusion

=<1.6.3

Matching in nixpkgs

pkgs.datafusion-cli

cli for Apache Arrow DataFusion

nixos-unstable 43.0.0
- nixpkgs-unstable 43.0.0
- nixos-unstable-small 43.0.0

pkgs.lxgw-fusionkai

Simplified Chinese font derived from LXGW WenKai GB, iansui and Klee One

nixos-unstable 24.134
- nixpkgs-unstable 24.134
- nixos-unstable-small 24.134

pkgs.finalfusion-utils

Utility for converting, quantizing, and querying word embeddings

nixos-unstable 0.14.1
- nixpkgs-unstable 0.14.1
- nixos-unstable-small 0.14.1

pkgs.python311Packages.datafusion

Extensible query execution framework

nixos-unstable 40.1.0
- nixpkgs-unstable 40.1.0
- nixos-unstable-small 40.1.0

pkgs.python312Packages.datafusion

Extensible query execution framework

nixos-unstable 40.1.0
- nixpkgs-unstable 40.1.0
- nixos-unstable-small 40.1.0

pkgs.haskellPackages.fusion-plugin

GHC plugin to make stream fusion more predictable

nixos-unstable 0.2.7
- nixpkgs-unstable 0.2.7
- nixos-unstable-small 0.2.7

pkgs.python311Packages.finalfusion

Python module for using finalfusion, word2vec, and fastText word embeddings

nixos-unstable 0.7.1
- nixpkgs-unstable 0.7.1
- nixos-unstable-small 0.7.1

pkgs.python311Packages.k-diffusion

Karras et al. (2022) diffusion models for PyTorch

nixos-unstable 0.1.1.post1
- nixpkgs-unstable 0.1.1.post1
- nixos-unstable-small 0.1.1.post1

pkgs.python312Packages.finalfusion