Security Advisory

CVE-2025-53502

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2025-07-03 16:11:07
Last updated 2025-07-10 23:37:56
Assigner wikimedia-foundation
CVSS score not scored
State PUBLISHED

Description

Improper Input Validation vulnerability in Wikimedia Foundation Mediawiki - FeaturedFeeds Extension allows Cross-Site Scripting (XSS).This issue affects Mediawiki - FeaturedFeeds Extension: 1.39.X, 1.42.X, 1.43.X.