Nixpkgs Security Tracker

Dismissed

Permalink CVE-2025-69343

updated 2 weeks, 2 days ago by @LeSuisse Activity log

Created automatic suggestion 2 weeks, 3 days ago
@LeSuisse removed package haskellPackages.theatre-dev 2 weeks, 2 days ago
@LeSuisse dismissed 2 weeks, 2 days ago

WordPress Theater for WordPress plugin <= 0.19 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Jeroen Schmit Theater for WordPress theatre allows Stored XSS.This issue affects Theater for WordPress: from n/a through <= 0.19.

References

https://patchstack.com/database/Wordpress/Plugin/theatre/vulnerability/wordpres… vdb-entry

Affected products

theatre

=<<= 0.19

Ignored packages (1)

pkgs.haskellPackages.theatre-dev

Minimalistic actor library experiments

nixos-unstable 0.5.0.1
- nixpkgs-unstable 0.5.0.1
- nixos-unstable-small 0.5.0.1
nixos-25.11 0.5.0.1
- nixos-25.11-small 0.5.0.1
- nixpkgs-25.11-darwin 0.5.0.1

Not present in nixpkgs

Suggestion detail

References

Affected products

pkgs.haskellPackages.theatre-dev