Beveiligingsadvies

CVE-2025-53487

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-07-07 15:13:38

Laatst bijgewerkt 2025-07-07 19:16:14

Toegewezen door wikimedia-foundation

CVSS-score 5.4

Status PUBLISHED

Beschrijving

The ApprovedRevs extension for MediaWiki is vulnerable to stored XSS in multiple locations where system messages are inserted into raw HTML without proper escaping. Attackers can exploit this by injecting JavaScript payloads via the uselang=x-xss language override, which causes crafted message keys to be rendered unescaped. This issue affects Mediawiki - ApprovedRevs extension: from 1.39.X before 1.39.13, from 1.42.X before 1.42.7, from 1.43.X before 1.43.2.

← Alle CVE's bekijken Bekijk op cve.org ↗