GO-2025-3447 vulnerabilities

Vulnerabilities for packages: victoriametrics-operator-fips, argo-events, buf, secrets-store-csi-driver-provider-azure, step-issuer, kind, aws-load-balancer-controller-fips, fq, fluent-operator-fips, prometheus-beat-exporter-fips, consul-k8s-fips, prometheus-operator, karpenter,...

CVE-2025-22525

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bharat Kambariya Donation Block For PayPal donations-block allows Stored XSS.This issue affects Donation Block For PayPal: from n/a through = 2.2.0...

CVE-2025-22525

creationtimestamp| type| source ---|---|--- 2025-01-07 16:18:01+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf62ffnont25...

CVE-2025-22525

CVE-2025-22525 affects the Donation Block For PayPal WordPress plugin. It is described as an stored XSS vulnerability (Cross-site Scripting) due to improper neutralization of input during web page generation, impacting Donation Block For PayPal versions up to 2.2.0. The connected Red Hat/Wordfenc...