CVE-2025-11261

CVE-2025-11261 is a cross-site scripting (XSS) vulnerability in Wikimedia Foundation MediaWiki, caused by improper neutralization of input during web page generation in the component resources/src/mediawiki.Language/mediawiki.Language.Js. Affected MediaWiki versions are listed as prior to 1.39.15...