CVE-2025-6595

A Stored Cross-Site Scripting (XSS) vulnerability exists in the MultimediaViewer component of the Wikimedia Foundation software. The root cause is the improper neutralization of input during web page generation, specifically through system messages . This flaw allows a malicious actor to perform ...

CVE-2025-6595

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Wikimedia Foundation MultimediaViewer.This issue affects MultimediaViewer: from before 1.39.13, 1.42.7, 1.43.2, 1.44.0...