2 matches found
CVE-2025-53485
SetTranslationHandler.php does not validate that the user is an election admin, allowing any even unauthenticated user to change election-related translation text. While partially broken in newer MediaWiki versions, the check is still missing. This issue affects Mediawiki - SecurePoll extension:...
8.7CVSS0.00287EPSS
SaveExploits0References2
CVE-2025-53485: Missing Authorization
SetTranslationHandler.php does not validate that the user is an election admin, allowing any even unauthenticated user to change election-related translation text. While partially broken in newer MediaWiki versions, the check is still missing. This issue affects Mediawiki - SecurePoll extension:...
7.5CVSS5.8AI score0.00287EPSS
SaveExploits0References1
20