Nixpkgs security tracker

Untriaged

Permalink CVE-2025-69391

created 5 months ago Activity log

Created suggestion 5 months ago

WordPress Diamond theme <= 2.4.8 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GT3themes Diamond diamond allows Reflected XSS.This issue affects Diamond: from n/a through <= 2.4.8.

References

https://patchstack.com/database/Wordpress/Theme/diamond/vulnerability/wordpress… vdb-entry

Affected products

diamond

=<<= 2.4.8

Matching in nixpkgs

pkgs.diamond

Accelerated BLAST compatible local sequence aligner

nixos-unstable 2.1.16
- nixpkgs-unstable 2.1.16
- nixos-unstable-small 2.1.16

pkgs.rocksndiamonds

Scrolling tile-based arcade style puzzle game

nixos-unstable 4.4.1.3
- nixpkgs-unstable 4.4.1.3
- nixos-unstable-small 4.4.1.3

pkgs.lattice-diamond

Vendor development tools for Lattice FPGA devices

nixos-unstable 3.10
- nixpkgs-unstable 3.10
- nixos-unstable-small 3.10

pkgs.libsForQt5.kdiamond

None

pkgs.kdePackages.kdiamond

KDiamond is a single player puzzle game

nixos-unstable 25.12.2
- nixpkgs-unstable 25.12.2
- nixos-unstable-small 25.12.2

pkgs.nightdiamond-cursors

NightDiamond cursor themes

nixos-unstable 0-unstable-2025-09-23
- nixpkgs-unstable 0-unstable-2025-09-23
- nixos-unstable-small 0-unstable-2025-09-23

pkgs.plasma5Packages.kdiamond