CVE-2026-96879

The Mediawiki - FlaggedRevs extension (up to version 1.46.0 ) from the Wikimedia Foundation is vulnerable to the improper removal of sensitive information before storage or transfer. Specifically, the "Checked by" label in page history may be displayed even when the underlying review log entry is...

PT-2026-99115

Name of the Vulnerable Software and Affected Versions Mediawiki - FlaggedRevs extension versions prior to 1.46.0 Description An issue exists where sensitive information is not properly removed before it is stored or transferred. Recommendations Update Mediawiki - FlaggedRevs extension to version...

CVE-2025-53491

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation Mediawiki - FlaggedRevs Extension allows Cross-Site Scripting XSS.This issue affects Mediawiki - FlaggedRevs Extension: from 1.43.X before 1.43.2...

CVE-2025-53491

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation Mediawiki - FlaggedRevs Extension allows Cross-Site Scripting XSS.This issue affects Mediawiki - FlaggedRevs Extension: from 1.43.X before 1.43.2...

CVE-2025-53491 XSS in FlaggedRevs

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation Mediawiki - FlaggedRevs Extension allows Cross-Site Scripting XSS.This issue affects Mediawiki - FlaggedRevs Extension: from 1.43.X before 1.43.2...

CVE-2025-53491

The Wikimedia Foundation Mediawiki - FlaggedRevs Extension is vulnerable to Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation. This issue affects versions 1.43.X before 1.43.2 . An attacker could potentially execute malicious scripts in the context of t...

CVE-2025-53491 XSS in FlaggedRevs

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation Mediawiki - FlaggedRevs Extension allows Cross-Site Scripting XSS.This issue affects Mediawiki - FlaggedRevs Extension: from 1.43.X before 1.43.2...

CVE-2025-53491: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation Mediawiki - FlaggedRevs Extension allows Cross-Site Scripting XSS.This issue affects Mediawiki - FlaggedRevs Extension: from 1.43.X before 1.43.2...

Wikimedia Mediawiki - FlaggedRevs Extension 安全漏洞

Wikimedia Mediawiki - FlaggedRevs Extension is a Wikimedia Foundation extension for flagging and reviewing revisions. A security vulnerability exists in Wikimedia Mediawiki - FlaggedRevs Extension versions prior to 1.43.2, which stems from improper input neutralization and could lead to a...

PT-2025-28206 · Mediawiki +1 · Mediawiki +1

Name of the Vulnerable Software and Affected Versions: Mediawiki - FlaggedRevs Extension versions 1.43.X through 1.43.1 Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-Site Scripting XSS. This allows for Cross-Site Scripting XS...