Nixpkgs Security Tracker

Permalink CVE-2025-49053

5.9 MEDIUM

CVSS version: 3.1
Attack vector (AV): NETWORK
Attack complexity (AC): LOW
Privileges required (PR): HIGH
User interaction (UI): REQUIRED
Scope (S): CHANGED
Confidentiality impact (C): LOW
Integrity impact (I): LOW
Availability impact (A): LOW

created 6 months ago

WordPress WP Airdrop Manager plugin <= 1.0.5 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in kadesthemes WP Airdrop Manager allows Stored XSS. This issue affects WP Airdrop Manager: from n/a through 1.0.5.

References

https://patchstack.com/database/wordpress/plugin/airdrop/vulnerability/wordpres… vdb-entry

Affected products

airdrop

=<1.0.5

Matching in nixpkgs

pkgs.pairdrop

Local file sharing in your browser

nixos-unstable -
- nixpkgs-unstable 1.11.2

pkgs.airdrop-cli

Use Airdrop from the CLI on macOS written in Swift

nixos-unstable -
- nixpkgs-unstable 0-unstable-2024-04-13

pkgs.nodePackages.hs-airdrop

Handshake airdrop redemption

nixos-unstable -
- nixpkgs-unstable 0.10.0

pkgs.nodePackages_latest.hs-airdrop