CVE-2025-53496

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation Mediawiki - MediaSearch Extension allows Stored XSS.This issue affects Mediawiki - MediaSearch Extension: from 1.42.X before 1.42.7, from 1.43.X before 1.43.2...

CVE-2025-53496

The Wikimedia Foundation Mediawiki - MediaSearch Extension is vulnerable to Stored Cross-site Scripting (XSS) due to improper input neutralization during web page generation. This vulnerability affects versions 1.42.X before 1.42.7 , 1.43.X before 1.43.2 , as well as versions 1.39.X through 1.39....