CVE-2025-6595

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation MultimediaViewer.This issue affects MultimediaViewer: from before 1.39.13, 1.42.7, 1.43.2, 1.44.0...

CVE-2025-6595

A Stored Cross-Site Scripting (XSS) vulnerability exists in the MultimediaViewer component of the Wikimedia Foundation software. The root cause is the improper neutralization of input during web page generation, specifically through system messages . This flaw allows a malicious actor to perform ...

CVE-2025-6595: Improper Neutralization of Input During Web Page Generation

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation MultimediaViewer.This issue affects MultimediaViewer: from before 1.39.13, 1.42.7, 1.43.2, 1.44.0...

The vulnerability of the MultimediaViewer component of the software, which is used to implement the hypertext environment of MediaWiki, allows a attacker to carry out XSS attacks.

The vulnerability of the MultimediaViewer component of the MediaWiki software framework relates to the lack of measures taken to protect the structure of web pages. Exploiting this vulnerability allows a malicious actor to carry out XSS attacks remotely...

MediaWiki Security Breach

MediaWiki is a set of free and freely available web-based Wiki engines from the American Wikimedia Wikimedia Foundation. The product can be used to deploy internal knowledge management and content management systems. A security vulnerability exists in MediaWiki that stems from the vulnerability t...