CVE-2025-53497

CVE-2025-53497 is a Stored XSS in the Wikimedia Foundation MediaWiki RelatedArticles Extension. The issue affects versions 1.43.X prior to 1.43.2 and arises from improper neutralization of input during web page generation. The documented impact is stored cross-site scripting. Remediation, where p...

CVE-2025-53497 Stored XSS in RelatedArticles

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation Mediawiki - RelatedArticles Extension allows Stored XSS.This issue affects Mediawiki - RelatedArticles Extension: from 1.43.X before 1.43.2...

CVE-2025-53491 XSS in FlaggedRevs

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation Mediawiki - FlaggedRevs Extension allows Cross-Site Scripting XSS.This issue affects Mediawiki - FlaggedRevs Extension: from 1.43.X before 1.43.2...

CVE-2025-53491

CVE-2025-53491 is an XSS vulnerability in the Wikimedia Foundation MediaWiki – FlaggedRevs extension, due to improper input neutralization during web page generation. Affected: FlaggedRevs extension versions 1.43.X before 1.43.2 (up to 1.43.1). Impact: Cross‑Site Scripting with low integrity/priv...

CVE-2025-7057

CVE-2025-7057 corresponds to a stored XSS vulnerability in the Wikimedia Foundation MediaWiki Quiz Extension. According to connected PT-Security data, this affects Quiz Extension versions 1.39.X through 1.39.12, 1.42.X through 1.42.6, and 1.43.X through 1.43.1. The root cause is improper neutrali...

CVE-2025-7057 Stored XSS in Quiz

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation Mediawiki - Quiz Extension allows Stored XSS.This issue affects Mediawiki - Quiz Extension: from 1.39.X before 1.39.13, from 1.42.X before 1.42.7, from 1.43.X before...

CVE-2025-7056

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation Mediawiki - UrlShortener Extension allows Stored XSS.This issue affects Mediawiki - UrlShortener Extension: from 1.42.X before 1.42.7, from 1.43.X before 1.43.2...

CVE-2025-7056 Stored XSS in UrlShortener

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation Mediawiki - UrlShortener Extension allows Stored XSS.This issue affects Mediawiki - UrlShortener Extension: from 1.42.X before 1.42.7, from 1.43.X before 1.43.2...

CVE-2025-7056 Stored XSS in UrlShortener

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation Mediawiki - UrlShortener Extension allows Stored XSS.This issue affects Mediawiki - UrlShortener Extension: from 1.42.X before 1.42.7, from 1.43.X before 1.43.2...

CVE-2025-7056

Summary (CVE-2025-7056) : A stored cross-site scripting (XSS) vulnerability exists in the Wikimedia Foundation MediaWiki UrlShortener extension. The flaw stems from improper neutralization of input during web page generation, allowing stored XSS. Affected versions are MediaWiki UrlShortener Exten...

Wikimedia Mediawiki - AbuseFilter Extension 安全漏洞

Wikimedia Mediawiki - AbuseFilter Extension is an abuse filter from the Wikimedia Foundation. A security vulnerability exists in Wikimedia Mediawiki - AbuseFilter Extension versions prior to 1.39.13, prior to 1.42.7, and prior to 1.43.2, which stems from insufficient logging and could lead to a...

Wikimedia Mediawiki - Quiz Extension 安全漏洞

Wikimedia Mediawiki - Quiz Extension is a quiz tool extension from the Wikimedia Foundation. A security vulnerability exists in Wikimedia Mediawiki - Quiz Extension versions prior to 1.39.13, prior to 1.42.7, and prior to 1.43.2, which stems from improper input neutralization and could lead to...

Wikimedia Mediawiki - RelatedArticles Extension 安全漏洞

Wikimedia Mediawiki - RelatedArticles Extension is a Wikimedia Foundation extension for recommending related pages. A security vulnerability exists in Wikimedia Mediawiki - RelatedArticles Extension versions prior to 1.43.2, which stems from improper input neutralization and could lead to a store...

CVE-2025-53482

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation Mediawiki - IPInfo Extension allows Cross-Site Scripting XSS.This issue affects Mediawiki - IPInfo Extension: from 1.39.X before 1.39.13, from 1.42.X before 1.42.7, from...

CVE-2025-6926

Improper Authentication vulnerability in Wikimedia Foundation Mediawiki - CentralAuth Extension allows : Bypass Authentication.This issue affects Mediawiki - CentralAuth Extension: from 1.39.X before 1.39.13, from 1.42.X before 1.42.7, from 1.43.X before 1.43.2...

CVE-2025-53502

Improper Input Validation vulnerability in Wikimedia Foundation Mediawiki - FeaturedFeeds Extension allows Cross-Site Scripting XSS.This issue affects Mediawiki - FeaturedFeeds Extension: 1.39.X, 1.42.X, 1.43.X...

CVE-2025-53500

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation Mediawiki - MassEditRegex Extension allows Stored XSS.This issue affects Mediawiki - MassEditRegex Extension: from 1.39.X before 1.39.12, from 1.42.X before 1.42.7, from...

CVE-2025-53501

Improper Access Control vulnerability in Wikimedia Foundation Mediawiki - Scribunto Extension allows : Accessing Functionality Not Properly Constrained by Authorization.This issue affects Mediawiki - Scribunto Extension: from 1.39.X before 1.39.12, from 1.42.X before 1.42.7, from 1.43.X before...

CVE-2025-53489

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation Mediawiki - GoogleDocs4MW Extension allows Cross-Site Scripting XSS.This issue affects Mediawiki - GoogleDocs4MW Extension: from 1.42.X before 1.42.7, from 1.43.X before...

CVE-2025-53481

Uncontrolled Resource Consumption vulnerability in Wikimedia Foundation Mediawiki - IPInfo Extension allows Excessive Allocation.This issue affects Mediawiki - IPInfo Extension: from 1.39.X before 1.39.13, from 1.42.X before 1.42.7, from 1.43.X before 1.43.2...