Permalink
CVE-2025-23760
7.1 HIGH
- CVSS version: 3.1
- Attack vector (AV): NETWORK
- Attack complexity (AC): LOW
- Privileges required (PR): NONE
- User interaction (UI): REQUIRED
- Scope (S): CHANGED
- Confidentiality impact (C): LOW
- Integrity impact (I): LOW
- Availability impact (A): LOW
WordPress Chatter plugin <= 1.0.1 - CSRF to Stored XSS vulnerability
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Alex Volkov Chatter allows Stored XSS. This issue affects Chatter: from n/a through 1.0.1.
References
Affected products
chatter
- =<1.0.1
Matching in nixpkgs
pkgs.chatterino2
Chat client for Twitch chat
-
nixos-unstable -
- nixpkgs-unstable 2.5.3
pkgs.chatterino7
Chat client for Twitch chat
-
nixos-unstable -
- nixpkgs-unstable 7.5.3
pkgs.haskellPackages.chatter
A library of simple NLP algorithms
-
nixos-unstable -
- nixpkgs-unstable 0.9.1.0
pkgs.typstPackages.chatter_0_1_0
Write dialog between any number of characters quickly and cleanly. Great for translations or short assignments
-
nixos-unstable -
- nixpkgs-unstable 0.1.0
Package maintainers
-
@0Supa Supa <supa.codes@gmail.com>
-
@nycodeghg Marie Ramlow <tabmeier12+nix@gmail.com>
-
@sternenseemann Lukas Epple <sternenseemann@systemli.org>
-
@cherrypiejam Gongqi Huang