EUVD-2025-34941

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in The Wikimedia Foundation MediaWiki WebAuthn extension allows Stored XSS.This issue affects MediaWiki WebAuthn extension: 1.39, 1.43, 1.44...

PT-2025-42665

Name of the Vulnerable Software and Affected Versions MediaWiki WebAuthn extension versions 1.39, 1.43, and 1.44 Description A flaw exists in the MediaWiki WebAuthn extension related to improper input handling during web page generation, leading to a Stored Cross-site Scripting issue. This allows...