CVE-2025-53494

Name of the Vulnerable Software and Affected Versions: Mediawiki - TwoColConflict Extension versions 1.39.X through 1.39.12 Mediawiki - TwoColConflict Extension versions 1.42.X through 1.42.6 Mediawiki - TwoColConflict Extension versions 1.43.X through 1.43.1

Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting (XSS). This allows for Stored XSS in the Mediawiki - TwoColConflict Extension.

Recommendations: For versions 1.39.X through 1.39.12, update to version 1.39.13 or later. For versions 1.42.X through 1.42.6, update to version 1.42.7 or later. For versions 1.43.X through 1.43.1, update to version 1.43.2 or later.