PT-2025-16134
CVE-2025-32070
·
Published
2025-04-11
·
Updated
2025-07-07
Description by
CVSS 3.1
5.4
MediumMetricsAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions:
Mediawiki - AJAX Poll Extension versions 1.39 through 1.43
Description:
The issue is related to Improper Input Validation, which allows Cross-Site Scripting (XSS) in the Mediawiki - AJAX Poll Extension.
Recommendations:
For versions 1.39 through 1.43, update to a version that fixes the Improper Input Validation issue to prevent Cross-Site Scripting (XSS).
As a temporary workaround, consider restricting user input to minimize the risk of exploitation.
Found an issue in the description? Have something to add? Feel free to write us 👾