[SECURITY] Fedora 43 Update: nghttp2-1.66.0-3.fc43

This package contains the HTTP/2 client, server and proxy programs...

CVE-2025-1798

The does not sanitise and escape some parameters when outputting them back in a page, allowing unauthenticated users the ability to perform stored Cross-Site Scripting attacks...

CVE-2025-1798

creationtimestamp| type| source ---|---|--- 2025-03-25 06:23:31+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/8598 2025-03-25 08:49:29+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3ll6va2wpgz24 2025-03-25 09:27:47+00:00| seen| https://t.me/cvedetector/21...

CVE-2025-1798

The does not sanitise and escape some parameters when outputting them back in a page, allowing unauthenticated users the ability to perform stored Cross-Site Scripting attacks...

CVE-2025-1798

The WordPress plugin Design Comuni Italia is vulnerable to stored Cross-Site Scripting (XSS) in versions prior to 1.1.2 . The root cause is a failure to properly sanitize and escape certain parameters when they are output back to a page. This allows unauthenticated users to perform stored XSS att...