CVE-2025-53482

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation Mediawiki - IPInfo Extension allows Cross-Site Scripting XSS.This issue affects Mediawiki - IPInfo Extension: from 1.39.X before 1.39.13, from 1.42.X before 1.42.7, from...

CVE-2025-53482

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation Mediawiki - IPInfo Extension allows Cross-Site Scripting XSS.This issue affects Mediawiki - IPInfo Extension: from 1.39.X before 1.39.13, from 1.42.X before 1.42.7, from...

CVE-2025-53482

A Cross-Site Scripting (XSS) vulnerability exists in the Wikimedia Foundation Mediawiki - IPInfo Extension due to improper neutralization of input during web page generation. The flaw specifically allows XSS through several IPInfo messages displayed in infoboxes and popups. Affected versions incl...