CVE-2025-53486

The WikiCategoryTagCloud extension is vulnerable to reflected XSS via the linkstyle attribute, which is improperly concatenated into inline HTML without escaping. An attacker can inject JavaScript event handlers such as onmouseenter using carefully crafted input via the tag:tagcloud parser...

CVE-2025-53486

The MediaWiki WikiCategoryTagCloud extension is vulnerable to reflected XSS due to improper neutralization of input during web page generation. The linkstyle parameter is processed via Sanitizer::checkCss() (which fails to escape HTML) and is subsequently inserted into a style attribute using str...

CVE-2025-53486 WikiCategoryTagCloud: Reflected Cross-Site Scripting (XSS) via linkstyle attribute in parser function

The WikiCategoryTagCloud extension is vulnerable to reflected XSS via the linkstyle attribute, which is improperly concatenated into inline HTML without escaping. An attacker can inject JavaScript event handlers such as onmouseenter using carefully crafted input via the tag:tagcloud parser...

Wikimedia Mediawiki - WikiCategoryTagCloud Extension 安全漏洞

Wikimedia Mediawiki - WikiCategoryTagCloud Extension is an extension for Wiki by the Wikimedia Foundation. A security vulnerability exists in Wikimedia Mediawiki - WikiCategoryTagCloud Extension versions prior to 1.39.13, prior to 1.42.7, and prior to 1.43.2, which stems from the linkstyle...

CVE-2025-53486: Improper Neutralization of Input During Web Page Generation

The WikiCategoryTagCloud extension is vulnerable to reflected XSS via the linkstyle attribute, which is improperly concatenated into inline HTML without escaping. An attacker can inject JavaScript event handlers such as onmouseenter using carefully crafted input via the tag:tagcloud parser...

PT-2025-28177 · Mediawiki · Mediawiki - Wikicategorytagcloud Extension

Name of the Vulnerable Software and Affected Versions: MediaWiki WikiCategoryTagCloud extension versions 1.39.X through 1.39.12 MediaWiki WikiCategoryTagCloud extension versions 1.42.X through 1.42.6 MediaWiki WikiCategoryTagCloud extension versions 1.43.X through 1.43.1 Description: The...