CVE-2025-67475

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/CommentFormatter/CommentParser.Php. This issue affects MediaWiki: from before 1.39.16, 1.43.6,...

The vulnerability of the CommentFormatter/CommentParser.php file, a software tool used for implementing the hypertext environment in MediaWiki, allows a malicious actor to execute cross-site scripting (XSS) attacks.

The vulnerability of the CommentFormatter/CommentParser.php file, a software component used to implement the MediaWiki hypertext environment, is related to improper input neutralization during the creation of web pages. Exploiting this vulnerability allows a malicious actor to perform cross-site...

CVE-2024-34507

An issue was discovered in includes/CommentFormatter/CommentParser.php in MediaWiki before 1.39.7, 1.40.x before 1.40.3, and 1.41.x before 1.41.1. XSS can occur because of mishandling of the 0x1b character, as demonstrated by Special:RecentChanges%1b0000000...