CVE-2025-53486

The WikiCategoryTagCloud extension is vulnerable to reflected XSS via the linkstyle attribute, which is improperly concatenated into inline HTML without escaping. An attacker can inject JavaScript event handlers such as onmouseenter using carefully crafted input via the tag:tagcloud parser...

CVE-2025-53486

The Mediawiki WikiCategoryTagCloud extension is vulnerable to reflected Cross-Site Scripting (XSS) due to the linkstyle attribute being improperly concatenated into inline HTML without escaping. Specifically, the parameter is only passed through Sanitizer::checkCss() and then directly inserted in...