Nixpkgs Security Tracker

Dismissed

Permalink CVE-2025-62136

6.5 MEDIUM

CVSS version: 3.1
Attack vector (AV): NETWORK
Attack complexity (AC): LOW
Privileges required (PR): LOW
User interaction (UI): REQUIRED
Scope (S): CHANGED
Confidentiality impact (C): LOW
Integrity impact (I): LOW
Availability impact (A): LOW

updated 2 months, 1 week ago by @LeSuisse Activity log

Created automatic suggestion 2 months, 1 week ago
@LeSuisse removed package melos 2 months, 1 week ago
@LeSuisse dismissed 2 months, 1 week ago

WordPress Melos theme <= 1.6.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in ThinkUpThemes Melos allows Stored XSS.This issue affects Melos: from n/a through 1.6.0.

References

https://vdp.patchstack.com/database/wordpress/theme/melos/vulnerability/wordpre… vdb-entry
https://patchstack.com/database/wordpress/theme/melos/vulnerability/wordpress-m… vdb-entry

Affected products

melos

=<1.6.0

WP theme not present in nixpkgs

Suggestion detail

References

Affected products