CVE-2025-53093

TabberNeue is a MediaWiki extension that allows the wiki to create tabs. Starting in version 3.0.0 and prior to version 3.1.1, any user can insert arbitrary HTMLinto the DOM by inserting a payload into any allowed attribute of the tag. Version 3.1.1 contains a patch for the bug...

CVE-2025-53093

TabberNeue is a MediaWiki extension that allows the wiki to create tabs. Starting in version 3.0.0 and prior to version 3.1.1, any user can insert arbitrary HTMLinto the DOM by inserting a payload into any allowed attribute of the tag. Version 3.1.1 contains a patch for the bug...

CVE-2025-53093

CVE-2025-53093 concerns the TabberNeue MediaWiki extension. Prior to 3.1.1, any user could inject arbitrary HTML into the DOM by placing payloads in allowed attributes of the tag, enabling potential stored XSS. The issue stems from insufficient sanitization of attribute values being inserted int...