CVE-2025-53485

The MediaWiki SecurePoll extension is vulnerable to a missing authorization flaw in SetTranslationHandler.php . Because the software fails to verify that a user is an election administrator, any user—including unauthenticated attackers—can modify election-related translation text. This issue impa...