GO-2025-3447 vulnerabilities

Vulnerabilities for packages: aws-flb-firehose-fips, xcaddy, eck-operator, dex-k8s-authenticator, nri-mssql, smarter-device-manager-fips, spicedb, libnvidia-container, kubernetes-dashboard-api, timestamp-authority-fips, opa-envoy, flux-image-reflector-controller-fips, rancher-agent,...

CVE-2025-22525

Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in Bharat Kambariya Donation Block For PayPal donations-block allows Stored XSS.This issue affects Donation Block For PayPal: from n/a through = 2.2.0...

CVE-2025-22525

creationtimestamp| type| source ---|---|--- 2025-01-07 16:18:01+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf62ffnont25...

CVE-2025-22525

CVE-2025-22525 affects the Donation Block For PayPal WordPress plugin. It is described as an stored XSS vulnerability (Cross-site Scripting) due to improper neutralization of input during web page generation, impacting Donation Block For PayPal versions up to 2.2.0. The connected Red Hat/Wordfenc...