Nixpkgs Security Tracker

Permalink CVE-2024-33952

6.5 MEDIUM

CVSS version: 3.1
Attack vector (AV): NETWORK
Attack complexity (AC): LOW
Privileges required (PR): LOW
User interaction (UI): REQUIRED
Scope (S): CHANGED
Confidentiality impact (C): LOW
Integrity impact (I): LOW
Availability impact (A): LOW

created 6 months ago

WordPress Unique theme <= 0.3.0 - Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Justin Tadlock Unique allows Stored XSS.This issue affects Unique: from n/a through 0.3.0.

References

https://patchstack.com/database/vulnerability/unique/wordpress-unique-theme-0-3… vdb-entry
https://patchstack.com/database/vulnerability/unique/wordpress-unique-theme-0-3… vdb-entry
https://patchstack.com/database/vulnerability/unique/wordpress-unique-theme-0-3… x_transferred vdb-entry

Affected products

unique

=<0.3.0

unique_theme

=<0.3.0

Matching in nixpkgs

pkgs.libunique

Library for writing single instance applications

nixos-unstable -
- nixpkgs-unstable 1.1.6

pkgs.libunique3

Library for writing single instance applications

nixos-unstable -
- nixpkgs-unstable 3.0.2

pkgs.haskellPackages.unique

Fully concurrent unique identifiers

nixos-unstable -
- nixpkgs-unstable 0.0.1

pkgs.haskellPackages.unique-logic

Solve simple simultaneous equations

nixos-unstable -
- nixpkgs-unstable 0.4.0.1

pkgs.haskellPackages.unique-logic-tf

Solve simple simultaneous equations

nixos-unstable -
- nixpkgs-unstable 0.5.1

pkgs.python312Packages.unique-log-filter

Log filter that removes duplicate log messages

nixos-unstable -
- nixpkgs-unstable 0.1.0

pkgs.python313Packages.unique-log-filter