CVE-2025-53488

The Wikimedia Foundation Mediawiki - WikiHiero Extension is vulnerable to Stored Cross-site Scripting (XSS) due to Improper Neutralization of Input During Web Page Generation . This flaw allows an attacker to inject malicious scripts that are stored on the server and executed in the browsers of u...

CVE-2025-53498 Lack of Audit Logging in AbuseFilter

Insufficient Logging vulnerability in Wikimedia Foundation Mediawiki - AbuseFilter Extension allows Data Leakage Attacks.This issue affects Mediawiki - AbuseFilter Extension: from 1.43.X before 1.43.2...

CVE-2025-53499

The Mediawiki - AbuseFilter Extension (versions 1.43.X before 1.43.2) is vulnerable to a Missing Authorization flaw. This security weakness allows an attacker to bypass authorization controls via the abusefiltercheckmatch API to unauthorizedly access and inspect protected variables . Impacted ver...

CVE-2025-53495

The Wikimedia Foundation Mediawiki - AbuseFilter Extension is susceptible to a Missing Authorization vulnerability (CWE-862) in versions 1.43.X before 1.43.2 (also affecting versions prior to 1.39.13 and 1.42.7 ). The root cause is a lack of authorization checks in the AbuseFilter process, which ...

CVE-2025-53495 Unauthorized Disclosure of IP Reputation in AbuseFilter

Missing Authorization vulnerability in Wikimedia Foundation Mediawiki - AbuseFilter Extension allows Unauthorized Access.This issue affects Mediawiki - AbuseFilter Extension: from 1.43.X before 1.43.2...

CVE-2025-53497

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation Mediawiki - RelatedArticles Extension allows Stored XSS.This issue affects Mediawiki - RelatedArticles Extension: from 1.43.X before 1.43.2...

CVE-2025-53491

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation Mediawiki - FlaggedRevs Extension allows Cross-Site Scripting XSS.This issue affects Mediawiki - FlaggedRevs Extension: from 1.43.X before 1.43.2...

CVE-2025-53497

The Wikimedia Foundation Mediawiki - RelatedArticles Extension is vulnerable to Stored Cross-site Scripting (XSS) due to improper neutralization of input during web page generation. This flaw impacts versions 1.43.X before 1.43.2 . An attacker could potentially execute malicious scripts in the co...

CVE-2025-53497 Stored XSS in RelatedArticles

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation Mediawiki - RelatedArticles Extension allows Stored XSS.This issue affects Mediawiki - RelatedArticles Extension: from 1.43.X before 1.43.2...

CVE-2025-53497 Stored XSS in RelatedArticles

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation Mediawiki - RelatedArticles Extension allows Stored XSS.This issue affects Mediawiki - RelatedArticles Extension: from 1.43.X before 1.43.2...

CVE-2025-53491

The Wikimedia Foundation Mediawiki - FlaggedRevs Extension is vulnerable to Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation. This issue affects versions 1.43.X before 1.43.2 . An attacker could potentially execute malicious scripts in the context of t...

CVE-2025-53491 XSS in FlaggedRevs

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation Mediawiki - FlaggedRevs Extension allows Cross-Site Scripting XSS.This issue affects Mediawiki - FlaggedRevs Extension: from 1.43.X before 1.43.2...

CVE-2025-7057

The Wikimedia Foundation Mediawiki - Quiz Extension is vulnerable to Stored Cross-Site Scripting (XSS) due to improper neutralization of input during web page generation. This vulnerability affects versions 1.39.X before 1.39.13 , 1.42.X before 1.42.7 , and 1.43.X before 1.43.2 . Attackers can ex...

CVE-2025-7057 Stored XSS in Quiz

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation Mediawiki - Quiz Extension allows Stored XSS.This issue affects Mediawiki - Quiz Extension: from 1.39.X before 1.39.13, from 1.42.X before 1.42.7, from 1.43.X before...

CVE-2025-7056

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation Mediawiki - UrlShortener Extension allows Stored XSS.This issue affects Mediawiki - UrlShortener Extension: from 1.42.X before 1.42.7, from 1.43.X before 1.43.2...

CVE-2025-7056 Stored XSS in UrlShortener

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation Mediawiki - UrlShortener Extension allows Stored XSS.This issue affects Mediawiki - UrlShortener Extension: from 1.42.X before 1.42.7, from 1.43.X before 1.43.2...

CVE-2025-7056

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation Mediawiki - UrlShortener Extension allows Stored XSS.This issue affects Mediawiki - UrlShortener Extension: from 1.42.X before 1.42.7, from 1.43.X before 1.43.2...

CVE-2025-7056

The Wikimedia Foundation Mediawiki - UrlShortener Extension is vulnerable to Stored Cross-site Scripting (XSS) due to improper neutralization of input during web page generation. This vulnerability affects versions 1.42.X before 1.42.7 and 1.43.X before 1.43.2 . An attacker could potentially exec...

CVE-2025-7056 Stored XSS in UrlShortener

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation Mediawiki - UrlShortener Extension allows Stored XSS.This issue affects Mediawiki - UrlShortener Extension: from 1.42.X before 1.42.7, from 1.43.X before 1.43.2...

Wikimedia Mediawiki – AbuseFilter Extension security vulnerability

Wikimedia Mediawiki - AbuseFilter Extension is an abuse filter from the Wikimedia Foundation. A security vulnerability exists in Wikimedia Mediawiki - AbuseFilter Extension versions prior to 1.39.13, prior to 1.42.7, and prior to 1.43.2, which stems from insufficient logging and could lead to a...