CVE-2025-53487

The CVE describes a stored XSS in the MediaWiki ApprovedRevs extension. Affected versions are 1.39.x before 1.39.13, 1.42.x before 1.42.7, and 1.43.x before 1.43.2. The vulnerability arises from inserting system messages into raw HTML without proper escaping, enabling JavaScript payloads via the ...