CVE-2025-32071

The MediaWiki - Wikidata Extension (versions 1.39 through 1.43) is vulnerable to Cross-Site Scripting (XSS) due to improper input validation. The flaw exists in the ImageHandler::getDimensionsString() method, where an attacker can inject malicious code via the widthheight message parameter. Affec...