CVE-2025-53496

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation Mediawiki - MediaSearch Extension allows Stored XSS.This issue affects Mediawiki - MediaSearch Extension: from 1.42.X before 1.42.7, from 1.43.X before 1.43.2...

CVE-2025-53496

CVE-2025-53496 is a Stored XSS vulnerability in the Wikimedia Foundation Mediawiki MediaSearch Extension. The issue arises from improper neutralization of input during web page generation, allowing stored cross-site scripting. Affected versions are Mediawiki MediaSearch Extension 1.42.X before 1....