CVE-2025-61642 Stored XSS through system messages provided to CodexHtmlForms

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/htmlform/CodexHTMLForm.Php, includes/htmlform/fields/HTMLButtonField.Php. This issue affects...

CVE-2025-61636

CVE-2025-61636 is a MediaWiki XSS vulnerability in includes/htmlform/fields/HTMLButtonField.Php. Affects MediaWiki versions before 1.39.14, 1.43.4, and 1.44.1. Red Hat describes it as a cross-site scripting flaw that could enable information disclosure or browser-context code execution; Debian no...

CVE-2025-61636

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation MediaWiki. This vulnerability is associated with program files includes/htmlform/fields/HTMLButtonField.Php. This issue affects MediaWiki: from before 1.39.14, 1.43.4,...