2 matches found
CVE-2025-53484
User-controlled inputs are improperly escaped in: VotePage.php poll option input ResultPage::getPagesTab and getErrorsTab user-controllable page names This allows attackers to inject JavaScript and compromise user sessions under certain conditions. This issue affects Mediawiki - SecurePoll...
9.8CVSS0.00541EPSS
SaveExploits0References3
CVE-2025-53484: Improper Neutralization of Input During Web Page Generation
User-controlled inputs are improperly escaped in: VotePage.php poll option input ResultPage::getPagesTab and getErrorsTab user-controllable page names This allows attackers to inject JavaScript and compromise user sessions under certain conditions. This issue affects Mediawiki - SecurePoll...
9.8CVSS5.8AI score0.00541EPSS
SaveExploits0References1
20