PT-2025-16131 · Mediawiki · Growthexperiments Extension For Mediawiki

·

CVE-2025-32067

·

Published

2025-04-11

·

Updated

2025-07-07

CVSS v3.1

5.4

Medium

VectorAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions: Mediawiki - Growth Experiments Extension versions 1.39 through 1.43
Description: The issue is related to Improper Input Validation in the Mediawiki - Growth Experiments Extension, which allows Cross-Site Scripting (XSS).
Recommendations: For versions 1.39 through 1.43, update to a version that fixes the Improper Input Validation issue to prevent Cross-Site Scripting (XSS).

Fix

RCE

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2025-32067

Affected Products

Growthexperiments Extension For Mediawiki