Nixpkgs Security Tracker

Permalink CVE-2025-69391

created 1 month ago

WordPress Diamond theme <= 2.4.8 - Reflected Cross Site Scripting (XSS) vulnerability

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in GT3themes Diamond diamond allows Reflected XSS.This issue affects Diamond: from n/a through <= 2.4.8.

References

https://patchstack.com/database/Wordpress/Theme/diamond/vulnerability/wordpress… vdb-entry

Affected products

diamond

=<<= 2.4.8

Matching in nixpkgs

pkgs.diamond

Accelerated BLAST compatible local sequence aligner

nixos-unstable 2.1.16
- nixpkgs-unstable 2.1.16
- nixos-unstable-small 2.1.16
nixos-25.11 2.1.14
- nixos-25.11-small 2.1.14
- nixpkgs-25.11-darwin 2.1.14

pkgs.rocksndiamonds

Scrolling tile-based arcade style puzzle game

nixos-unstable 4.4.1.3
- nixpkgs-unstable 4.4.1.3
- nixos-unstable-small 4.4.1.3
nixos-25.11 4.4.0.5
- nixos-25.11-small 4.4.0.5
- nixpkgs-25.11-darwin 4.4.0.5

pkgs.lattice-diamond

Vendor development tools for Lattice FPGA devices

nixos-unstable 3.10
- nixpkgs-unstable 3.10
- nixos-unstable-small 3.10
nixos-25.11 3.10
- nixos-25.11-small 3.10
- nixpkgs-25.11-darwin 3.10

pkgs.libsForQt5.kdiamond

Single player puzzle game

pkgs.kdePackages.kdiamond

KDiamond is a single player puzzle game

nixos-unstable 25.12.2
- nixpkgs-unstable 25.12.2
- nixos-unstable-small 25.12.2
nixos-25.11 25.08.3
- nixos-25.11-small 25.08.3
- nixpkgs-25.11-darwin 25.08.3